Unverified Commit f2cc57c8 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!7483 Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout 

Merge Pull Request from: @ci-robot 
 
PR sync from: Zeng Heng <zengheng4@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/TGRVGFFM22KPODYQOSUMNQEPCVRDBY23/ 
 
https://gitee.com/src-openeuler/kernel/issues/I9OZA9 
 
Link:https://gitee.com/openeuler/kernel/pulls/7483

 

Reviewed-by: default avatarLiu YongQiang <liuyongqiang13@huawei.com>
Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Signed-off-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
parents 31f83f62 011bbfc4

net/bluetooth/sco.c

+4 −0
Original line number Diff line number Diff line
@@ -82,6 +82,10 @@ static void sco_sock_timeout(struct work_struct *work) 
	struct sock *sk;



	sco_conn_lock(conn);

	if (!conn->hcon) {

		sco_conn_unlock(conn);

		return;

	}

	sk = conn->sk;

	if (sk)

		sock_hold(sk);