Unverified Commit aa9fb809 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!12768 Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync 

Merge Pull Request from: @ci-robot 
 
PR sync from: Xiongfeng Wang <wangxiongfeng2@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/S6XERN7RSXXTPJVMVVB35KARIWESALQC/ 
 
https://gitee.com/src-openeuler/kernel/issues/IAYRF4 
 
Link:https://gitee.com/openeuler/kernel/pulls/12768

 

Reviewed-by: default avatarXie XiuQi <xiexiuqi@huawei.com>
Signed-off-by: default avatarZhang Peng <zhangpeng362@huawei.com>
parents 6869c047 ea56baff

net/bluetooth/hci_conn.c

+3 −0
Original line number Diff line number Diff line
@@ -290,6 +290,9 @@ static int hci_enhanced_setup_sync(struct hci_dev *hdev, void *data) 


	kfree(conn_handle);



	if (!hci_conn_valid(hdev, conn))

		return -ECANCELED;



	bt_dev_dbg(hdev, "hcon %p", conn);



	configure_datapath_sync(hdev, &conn->codec);