From: Anton Protopopov
Date: Wed, 17 Feb 2016 11:19:56 -0500
> A return value of the bchannel_get_rxbuf() function is compared with the
> positive ENOMEM value instead of the negative -ENOMEM value to detect a
> memory allocation problem. Thus, after a possible memory allocation
> failure the bc-
A return value of the bchannel_get_rxbuf() function is compared with the
positive ENOMEM value instead of the negative -ENOMEM value to detect a
memory allocation problem. Thus, after a possible memory allocation
failure the bc->bch.rx_skb will be NULL which will lead to a NULL
pointer dereference.
