Ksawlii/kernel_samsung_a53x
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Bluetooth: SMP: Fix crash when receiving new connection when debug is enabled

Browse source 
commit 995fca15b73ff8f92888cc2d5d95f17ffdac74ba upstream.

When receiving a new connection pchan->conn won't be initialized so the
code cannot use bt_dev_dbg as the pointer to hci_dev won't be
accessible.

Fixes: 2e1614f7d61e4 ("Bluetooth: SMP: Convert BT_ERR/BT_DBG to bt_dev_err/bt_dev_dbg")
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
Luiz Augusto von Dentz 2021-06-14 10:46:44 -07:00 • committed by Ksawlii
parent 34e0e18d41
commit 005ea78663
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
net/bluetooth/smp.c
View file

@ -3239,7 +3239,7 @@ static inline struct l2cap_chan *smp_new_conn_cb(struct l2cap_chan *pchan)
{
struct l2cap_chan *chan;
bt_dev_dbg(pchan->conn->hcon->hdev, "pchan %p", pchan);
BT_DBG("pchan %p", pchan);
chan = l2cap_chan_create();
if (!chan)
@ -3260,7 +3260,7 @@ static inline struct l2cap_chan *smp_new_conn_cb(struct l2cap_chan *pchan)
*/
atomic_set(&chan->nesting, L2CAP_NESTING_SMP);
bt_dev_dbg(pchan->conn->hcon->hdev, "created chan %p", chan);
BT_DBG("created chan %p", chan);
return chan;
}
@ -3364,7 +3364,7 @@ static void smp_del_chan(struct l2cap_chan *chan)
{
struct smp_dev *smp;
bt_dev_dbg(chan->conn->hcon->hdev, "chan %p", chan);
BT_DBG("chan %p", chan);
smp = chan->data;
if (smp) {