forked from luck/tmp_suning_uos_patched
57136ca6d5
There's a problem in drivers/bluetooth/dtl1_cs.c::dtl1_hci_send_frame() If bt_skb_alloc() returns NULL, then skb_reserve(s, NSHL); will cause a NULL pointer deref - ouch. If we can't allocate the resources we require we need to tell the caller by returning -ENOMEM. Found by the coverity checker as bug #409 Signed-off-by: Jesper Juhl <jesper.juhl@gmail.com> Acked-by: Marcel Holtmann <marcel@holtmann.org> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org> |
||
---|---|---|
.. | ||
bcm203x.c | ||
bfusb.c | ||
bluecard_cs.c | ||
bpa10x.c | ||
bt3c_cs.c | ||
btuart_cs.c | ||
dtl1_cs.c | ||
hci_bcsp.c | ||
hci_h4.c | ||
hci_ldisc.c | ||
hci_uart.h | ||
hci_usb.c | ||
hci_usb.h | ||
hci_vhci.c | ||
Kconfig | ||
Makefile |