Anant ThazhemadamandGreg Kroah-Hartman f48dbf5152 Bluetooth: hci_h5: fix memory leak in h5_close ...

[ Upstream commit 855af2d74c ]

When h5_close() is called, h5 is directly freed when !hu->serdev.
However, h5->rx_skb is not freed, which causes a memory leak.

Freeing h5->rx_skb and setting it to NULL, fixes this memory leak.

Fixes: ce945552fd ("Bluetooth: hci_h5: Add support for serdev enumerated devices")
Reported-by: syzbot+6ce141c55b2f7aafd1c4@syzkaller.appspotmail.com
Tested-by: syzbot+6ce141c55b2f7aafd1c4@syzkaller.appspotmail.com
Signed-off-by: Anant Thazhemadam <anant.thazhemadam@gmail.com>
Reviewed-by: Hans de Goede <hdegoede@redhat.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2020-12-30 11:53:05 +01:00

..

ath3k.c

Bluetooth: ath3k: use usb_control_msg_send() and usb_control_msg_recv()

2020-09-25 16:33:59 +02:00

bcm203x.c

Bluetooth: Use fallthrough pseudo-keyword

2020-07-10 19:09:42 +02:00

bfusb.c

Bluetooth: bfusb: Switch from BT_ERR to bt_dev_err where possible

2020-03-11 10:05:50 +02:00

bluecard_cs.c

Bluetooth: Use fallthrough pseudo-keyword

2020-07-10 19:09:42 +02:00

bpa10x.c

Bluetooth: bpa10x: change return value

2019-09-04 16:11:46 +02:00

bt3c_cs.c

…

btbcm.c

Bluetooth: btbcm: Added 003.006.007, changed 001.003.015

2020-05-28 10:28:12 +02:00

btbcm.h

Bluetooth: btbcm: Make btbcm_setup_patchram use btbcm_finalize

2020-04-22 19:43:58 +02:00

btintel.c

Bluetooth: btintel: Functions to send firmware header / payload

2020-09-14 20:30:36 +02:00

btintel.h

Bluetooth: btintel: Replace zero-length array with flexible-array member

2020-10-30 16:57:41 -05:00

btmrvl_debugfs.c

…

btmrvl_drv.h

…

btmrvl_main.c

Bluetooth: btmrvl_sdio: Implement prevent_wake

2020-06-12 08:38:52 +02:00

btmrvl_sdio.c

Bluetooth: btmrvl: eliminate duplicates introducing btmrvl_reg_89xx

2020-08-02 19:59:43 +02:00

btmrvl_sdio.h

…

btmtksdio.c

Bluetooth: btmtksdio: use NULL instead of zero

2020-09-11 08:57:15 +02:00

btmtkuart.c

Bluetooth: btmtkuart: Use serdev_device_write_buf() instead of serdev_device_write()

2020-06-01 08:05:07 +02:00

btqca.c

Bluetooth: hci_qca: Disable SoC debug logging for WCN3991

2020-06-12 15:17:47 +02:00

btqca.h

Bluetooth: hci_qca: Disable SoC debug logging for WCN3991

2020-06-12 15:17:47 +02:00

btqcomsmd.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 284

2019-06-05 17:36:37 +02:00

btrsi.c

…

btrtl.c

Bluetooth: btrtl: Add support for RTL8761B

2020-04-11 07:58:23 +02:00

btrtl.h

Bluetooth: Replace zero-length array with flexible-array member

2020-02-28 08:30:02 +01:00

btsdio.c

Bluetooth: btsdio: Check for valid packet type

2020-01-15 22:28:51 +01:00

btusb.c

Bluetooth: btusb: Add Qualcomm Bluetooth SoC WCN6855 support

2020-09-27 23:44:50 +02:00

dtl1_cs.c

…

h4_recv.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

hci_ag6xx.c

Bluetooth: hci_uart: Replace zero-length array with flexible-array member

2020-02-13 08:28:38 +01:00

hci_ath.c

Bluetooth: hci_uart: check for missing tty operations

2019-07-31 13:17:33 -07:00

hci_bcm.c

Bluetooth: btbcm: Make btbcm_setup_patchram use btbcm_finalize

2020-04-22 19:43:58 +02:00

hci_bcsp.c

Bluetooth: Fix invalid-free in bcsp_close()

2019-11-04 15:19:02 +01:00

hci_h4.c

Bluetooth: hci_h4: Remove a redundant assignment in 'h4_flush()'

2020-02-28 08:43:57 +01:00

hci_h5.c

Bluetooth: hci_h5: fix memory leak in h5_close

2020-12-30 11:53:05 +01:00

hci_intel.c

Bluetooth: hci_intel: enable on new platform

2020-09-11 09:03:42 +02:00

hci_ldisc.c

Bluetooth: hci_uart: Cancel init work before unregistering

2020-08-02 20:01:27 +02:00

hci_ll.c

Bluetooth: Use fallthrough pseudo-keyword

2020-07-10 19:09:42 +02:00

hci_mrvl.c

Bluetooth: hci_uart: check for missing tty operations

2019-07-31 13:17:33 -07:00

hci_nokia.c

Bluetooth: hci_nokia: Save a few cycles in 'nokia_enqueue()'

2019-10-16 19:26:40 +02:00

hci_qca.c

Bluetooth: hci_qca: Remove duplicate power off in proto close

2020-09-11 09:09:48 +02:00

hci_serdev.c

Bluetooth: hci_serdev: Close UART port if NON_PERSISTENT_SETUP is set

2020-09-11 09:09:48 +02:00

hci_uart.h

Bluetooth: hci_h4: Add support for ISO packets

2020-01-15 22:28:51 +01:00

hci_vhci.c

Bluetooth: hci_vhci: Add support for ISO packets

2020-01-15 22:28:51 +01:00

Kconfig

Bluetooth: hci_h5: btrtl: Add support for RTL8822C

2020-02-18 09:22:22 +01:00

Makefile

Bluetooth: btwilink: drop superseded driver

2019-10-16 21:12:52 +02:00