Commit cdee5751 authored Apr 05, 2006 by Eric Sesterhenn Committed by David S. Miller Apr 09, 2006

[BLUETOOTH] sco: Possible double free.



this fixes coverity bug id #1068.
hci_send_sco() frees skb if (skb->len > hdev->sco_mtu).
Since it returns a negative error value only in this case, we
can directly return here.

Signed-off-by: Eric Sesterhenn <snakebyte@gmx.de>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent ad96b485

net/bluetooth/sco.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -255,7 +255,7 @@ static inline int sco_send_frame(struct sock sk, struct msghdr msg, int len)
		}

		if ((err = hci_send_sco(conn->hcon, skb)) < 0)
		goto fail;
		return err;

		return count;