summaryrefslogtreecommitdiffstats
path: root/drivers/bluetooth
diff options
context:
space:
mode:
authorSoenke Huster <soenke.huster@eknoes.de>2021-10-20 10:14:44 +0200
committerMarcel Holtmann <marcel@holtmann.org>2021-10-20 14:58:46 +0200
commit1d0688421449718c6c5f46e458a378c9b530ba18 (patch)
tree535a02cb841e8433ff20f436797d05fdf73b48f3 /drivers/bluetooth
parentb8f5482c9638915c19963f06d2f4094e276aaab6 (diff)
downloadlinux-1d0688421449718c6c5f46e458a378c9b530ba18.tar.gz
linux-1d0688421449718c6c5f46e458a378c9b530ba18.tar.xz
Bluetooth: virtio_bt: fix memory leak in virtbt_rx_handle()
On the reception of packets with an invalid packet type, the memory of the allocated socket buffers is never freed. Add a default case that frees these to avoid a memory leak. Fixes: afd2daa26c7a ("Bluetooth: Add support for virtio transport driver") Signed-off-by: Soenke Huster <soenke.huster@eknoes.de> Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Diffstat (limited to 'drivers/bluetooth')
-rw-r--r--drivers/bluetooth/virtio_bt.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/drivers/bluetooth/virtio_bt.c b/drivers/bluetooth/virtio_bt.c
index 57908ce4fae8..076e4942a3f0 100644
--- a/drivers/bluetooth/virtio_bt.c
+++ b/drivers/bluetooth/virtio_bt.c
@@ -202,6 +202,9 @@ static void virtbt_rx_handle(struct virtio_bluetooth *vbt, struct sk_buff *skb)
hci_skb_pkt_type(skb) = pkt_type;
hci_recv_frame(vbt->hdev, skb);
break;
+ default:
+ kfree_skb(skb);
+ break;
}
}