[lkml]   [2012]   [Apr]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
Patch in this message
Subject[ 11/68] [PATCH] Bluetooth: uart-ldisc: Fix memory leak
3.2-stable review patch.  If anyone has any objections, please let me know.

From: Johan Hovold <>

This is a partial, self-contained, minimal backport of commit
797fe796c4335b35d95d5326824513befdb5d1e9 upstream which fixes the memory

Bluetooth: uart-ldisc: Fix memory leak and remove destruct cb

We currently leak the hci_uart object if HCI_UART_PROTO_SET is never set
because the hci-destruct callback will then never be called. This fix
removes the hci-destruct callback and frees the driver internal private
hci_uart object directly on tty-close. We call hci_unregister_dev() here
so the hci-core will never call our callbacks again (except destruct).
Therefore, we can safely free the driver internal data right away and
set the destruct callback to NULL.

Signed-off-by: David Herrmann <>
Acked-by: Marcel Holtmann <>
Signed-off-by: Johan Hedberg <>
Signed-off-by: Johan Hovold <>
Signed-off-by: Greg Kroah-Hartman <>
drivers/bluetooth/hci_ldisc.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/drivers/bluetooth/hci_ldisc.c
+++ b/drivers/bluetooth/hci_ldisc.c
@@ -237,7 +237,6 @@ static void hci_uart_destruct(struct hci

BT_DBG("%s", hdev->name);
- kfree(hdev->driver_data);

/* ------ LDISC part ------ */
@@ -316,6 +315,7 @@ static void hci_uart_tty_close(struct tt
+ kfree(hu);

 \ /
  Last update: 2012-04-19 23:35    [from the cache]
©2003-2011 Jasper Spaans