Searched hist:dab6b5daeeb3e70bfb2ed2d6d6f02dd387e3b338 (Results 1 – 2 of 2) sorted by relevance
| /openbmc/linux/include/net/bluetooth/ |
| H A D | rfcomm.h | diff dab6b5daeeb3e70bfb2ed2d6d6f02dd387e3b338 Fri Mar 17 06:12:46 CDT 2017 Elena Reshetova <elena.reshetova@intel.com> Bluetooth: convert rfcomm_dlc.refcnt from atomic_t to refcount_t
refcount_t type and corresponding API should be
used instead of atomic_t when the variable is used as
a reference counter. This allows to avoid accidental
refcounter overflows that might lead to use-after-free
situations.
Signed-off-by: Elena Reshetova <elena.reshetova@intel.com>
Signed-off-by: Hans Liljestrand <ishkamiel@gmail.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: David Windsor <dwindsor@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
|
| /openbmc/linux/net/bluetooth/rfcomm/ |
| H A D | core.c | diff dab6b5daeeb3e70bfb2ed2d6d6f02dd387e3b338 Fri Mar 17 06:12:46 CDT 2017 Elena Reshetova <elena.reshetova@intel.com> Bluetooth: convert rfcomm_dlc.refcnt from atomic_t to refcount_t
refcount_t type and corresponding API should be
used instead of atomic_t when the variable is used as
a reference counter. This allows to avoid accidental
refcounter overflows that might lead to use-after-free
situations.
Signed-off-by: Elena Reshetova <elena.reshetova@intel.com>
Signed-off-by: Hans Liljestrand <ishkamiel@gmail.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: David Windsor <dwindsor@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
|