diff options
| author | Gianluca Anzolin <gianluca@sottospazio.it> | 2013-07-29 17:08:08 +0200 |
|---|---|---|
| committer | Gustavo Padovan <gustavo.padovan@collabora.co.uk> | 2013-08-21 16:47:05 +0200 |
| commit | 396dc223dd36edd218650d042a07c5e61f022c5b (patch) | |
| tree | aba106ba73936f4c271f9f3b2d218a435f2cce5c /fs | |
| parent | c7882cbd1151011ca8e6fb13530cd09eae1c39ee (diff) | |
| download | linux-396dc223dd36edd218650d042a07c5e61f022c5b.tar.bz2 | |
Bluetooth: Take proper tty_struct references
In net/bluetooth/rfcomm/tty.c the struct tty_struct is used without
taking references. This may lead to a use-after-free of the rfcomm tty.
Fix this by taking references properly, using the tty_port_* helpers
when possible.
The raw assignments of dev->port.tty in rfcomm_tty_open/close are
addressed in the later commit 'rfcomm: Implement .activate, .shutdown
and .carrier_raised methods'.
Signed-off-by: Gianluca Anzolin <gianluca@sottospazio.it>
Reviewed-by: Peter Hurley <peter@hurleysoftware.com>
Signed-off-by: Gustavo Padovan <gustavo.padovan@collabora.co.uk>
Diffstat (limited to 'fs')
0 files changed, 0 insertions, 0 deletions