[Bluetooth] Fix double frees on error paths of btusb and bpa10x drivers
authorMarcel Holtmann <marcel@holtmann.org>
Mon, 6 Oct 2008 10:22:51 +0000 (12:22 +0200)
committerMarcel Holtmann <marcel@holtmann.org>
Mon, 6 Oct 2008 10:22:51 +0000 (12:22 +0200)
commit36010ff6788a058147ae15a1aebf97fd30fa51a9
treeebca6f1912cd4424147414120722ada8e737cb52
parent94aca1dac6f6d21f4b07e4864baf7768cabcc6e7
[Bluetooth] Fix double frees on error paths of btusb and bpa10x drivers

The transfer buffer of an URB will be automatically freed when using
the URB_FREE_BUFFER transfer_flag. So the extra calls to kfree() will
cause a double free.

Reported-by: Justin Mattock <justinmattock@gmail.com>
Signed-off-by: Rabin Vincent <rabin@rab.in>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
drivers/bluetooth/bpa10x.c
drivers/bluetooth/btusb.c