Re: [PATCH] bluetooth: 6lowpan: fix use after free in chan_suspend/resume

Hi Michael, > A status field in the skb_cb struct was storing a channel status > based on channel suspend/resume events. This stored status was > then used to return EAGAIN if there were packet sending issues > in snd_pkt(). > > The issue is that the skb has been freed by the time the callback >

Re: [PATCH] bluetooth: 6lowpan: fix use after free in chan_suspend/resume

Hi Michael, On Tue, 2017-03-28 at 23:10 -0700, Michael Scott wrote: > A status field in the skb_cb struct was storing a channel status > based on channel suspend/resume events.  This stored status was > then used to return EAGAIN if there were packet sending issues > in snd_pkt(). > > The issue i

Re: [PATCH] bluetooth: 6lowpan: fix use after free in chan_suspend/resume

Hi Michael, On Wed, Mar 29, 2017 at 9:10 AM, Michael Scott wrote: > A status field in the skb_cb struct was storing a channel status > based on channel suspend/resume events. This stored status was > then used to return EAGAIN if there were packet sending issues > in snd_pkt(). > > The issue is

[PATCH] bluetooth: 6lowpan: fix use after free in chan_suspend/resume

A status field in the skb_cb struct was storing a channel status based on channel suspend/resume events. This stored status was then used to return EAGAIN if there were packet sending issues in snd_pkt(). The issue is that the skb has been freed by the time the callback to 6lowpan's suspend/resum