tree a87137cef1f5f4c6cde5d25cb6b5a1aed86f401a
parent 4befb867b9de8adc56c683f4cf6c9e6c035e94e3
author Johan Hedberg <johan.hedberg@intel.com> 1407783999 +0300
committer Marcel Holtmann <marcel@holtmann.org> 1407998963 +0200

Bluetooth: Fix double free of SMP data skb

In the case that the SMP recv callback returns error the calling code in
l2cap_core.c expects that it still owns the skb and will try to free it.
The SMP code should therefore not try to free the skb if it return an
error. This patch fixes such behavior in the SMP command handler
function.

Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>