Andrei Emeltchenko
3c4e0df028
Bluetooth: Use list _safe deleting from conn_hash_list ...
Use list_for_each_entry_safe which is safe version against removal
of list entry. Otherwise we remove hci_conn element and reference
next element which result in accessing LIST_POISON.
[ 95.571834] Bluetooth: unknown link type 127
[ 95.578349] BUG: unable to handle kernel paging request at 20002000
[ 95.580236] IP: [<20002000>] 0x20001fff
[ 95.580763] *pde = 00000000
[ 95.581196] Oops: 0000 [#1 ] SMP
...
[ 95.582298] Pid: 3355, comm: hciconfig Tainted: G O 3.2.0-VirttualBox
[ 95.582298] EIP: 0060:[<20002000>] EFLAGS: 00210206 CPU: 0
[ 95.582298] EIP is at 0x20002000
...
[ 95.582298] Call Trace:
[ 95.582298] [<f8231ab6>] ? hci_conn_hash_flush+0x76/0xf0 [bluetooth]
[ 95.582298] [<f822bcb1>] hci_dev_do_close+0xc1/0x2e0 [bluetooth]
[ 95.582298] [<f822d679>] ? hci_dev_get+0x69/0xb0 [bluetooth]
[ 95.582298] [<f822e1da>] hci_dev_close+0x2a/0x50 [bluetooth]
[ 95.582298] [<f824102f>] hci_sock_ioctl+0x1af/0x3f0 [bluetooth]
[ 95.582298] [<c11153ea>] ? handle_pte_fault+0x8a/0x8f0
[ 95.582298] [<c146becf>] sock_ioctl+0x5f/0x260
[ 95.582298] [<c146be70>] ? sock_fasync+0x90/0x90
[ 95.582298] [<c1152b33>] do_vfs_ioctl+0x83/0x5b0
[ 95.582298] [<c1563f87>] ? do_page_fault+0x297/0x500
[ 95.582298] [<c1563cf0>] ? spurious_fault+0xd0/0xd0
[ 95.582298] [<c107165b>] ? up_read+0x1b/0x30
[ 95.582298] [<c1563f87>] ? do_page_fault+0x297/0x500
[ 95.582298] [<c100aa9f>] ? init_fpu+0xef/0x160
[ 95.582298] [<c15617c0>] ? do_debug+0x180/0x180
[ 95.582298] [<c100a958>] ? fpu_finit+0x28/0x80
[ 95.582298] [<c11530e7>] sys_ioctl+0x87/0x90
[ 95.582298] [<c156795f>] sysenter_do_call+0x12/0x38
...
Signed-off-by: Andrei Emeltchenko <andrei.emeltchenko@intel.com>
Acked-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
2012-02-13 17:01:32 +02:00
2012-01-12 15:44:42 +10:30
2011-10-31 19:30:30 -04:00
2011-12-14 02:39:30 -05:00
2011-10-31 19:30:30 -04:00
2011-12-05 15:20:19 -05:00
2011-12-28 14:08:08 -05:00
2011-12-16 15:07:28 -05:00
2012-02-13 17:01:32 +02:00
2012-01-17 10:17:32 -05:00
2012-01-17 10:46:55 -05:00
2011-10-17 19:22:46 -04:00
2011-12-13 14:59:42 -08:00
2012-01-17 15:51:23 -05:00
2011-10-31 19:30:30 -04:00
2012-01-11 12:56:06 -08:00
2012-01-12 12:26:56 -08:00
2011-03-17 11:59:32 +11:00
2011-11-29 00:21:36 -05:00
2011-11-18 14:37:09 -05:00
2011-09-15 14:49:44 -04:00
2011-11-18 14:37:09 -05:00
2012-01-17 15:52:12 -05:00
2012-01-17 23:56:18 -05:00
2011-10-31 19:30:30 -04:00
2011-12-21 15:46:22 -05:00
2011-12-20 14:05:03 -05:00
2011-12-11 18:25:16 -05:00
2011-11-26 15:57:36 -05:00
2011-09-16 19:20:20 -04:00
2011-12-19 15:58:52 -05:00
2012-02-08 16:07:31 -05:00
2012-01-17 10:52:55 +01:00
2012-01-12 12:26:56 -08:00
2011-12-28 13:48:55 -05:00
2011-12-28 14:08:08 -05:00
2012-01-27 14:57:04 -05:00
2012-01-17 23:56:19 -05:00
2011-12-30 13:04:14 -05:00
2012-01-12 12:26:56 -08:00
2012-01-12 20:05:28 -08:00
2012-01-05 10:13:24 -05:00
2011-10-31 19:30:30 -04:00
2011-12-19 22:27:29 -05:00
2012-01-12 20:05:28 -08:00
2012-01-08 13:21:22 -08:00
2012-01-12 20:30:02 -08:00
2011-12-29 21:53:30 -05:00
2012-01-09 14:46:52 -08:00
2011-11-07 13:27:30 -05:00
2011-10-31 19:30:30 -04:00
2012-02-06 14:55:41 -05:00
2011-12-16 15:49:52 -05:00
2012-01-12 12:26:56 -08:00
2011-10-31 19:30:30 -04:00
2011-12-03 09:35:17 -08:00
2011-12-03 09:35:17 -08:00
2012-01-12 12:26:56 -08:00
2011-10-31 19:30:30 -04:00
3c4e0df028