Bluetooth: 6lowpan: use after free in disconnect_devices()
authorDan Carpenter <dan.carpenter@oracle.com>
Wed, 29 Oct 2014 16:10:57 +0000 (19:10 +0300)
committerMarcel Holtmann <marcel@holtmann.org>
Thu, 30 Oct 2014 16:23:25 +0000 (17:23 +0100)
commitdaac197ca9966eca3a6b07600e579756a9a1d447
tree212e2d7b9c528aec7db71480ad1b253cbd902929
parent38130c31ef50de1999983601e448db2b1bc1057c
Bluetooth: 6lowpan: use after free in disconnect_devices()

This was accidentally changed from list_for_each_entry_safe() to
list_for_each_entry() so now it has a use after free bug.  I've changed
it back.

Fixes: 90305829635d ('Bluetooth: 6lowpan: Converting rwlocks to use RCU')
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Jukka Rissanen <jukka.rissanen@linux.intel.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
net/bluetooth/6lowpan.c