Michael Knudsen c327cddd18 Bluetooth: Stop BCSP/H5 timer before cleaning up
When stopping BCSP/H5, stop the retransmission timer before proceeding
to clean up packet queues.  The previous code had a race condition where
the timer could trigger after the packet lists and protocol structure
had been removed which led to dereferencing NULL or use-after-free bugs.

Signed-off-by: Michael Knudsen <m.knudsen@samsung.com>
Reported-by: Kirill Tkhai <ktkhai@parallels.com>
Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
2014-03-04 11:03:14 +02:00
..
2014-01-25 13:18:00 -08:00
2014-02-05 16:01:11 -08:00
2014-02-09 15:21:16 -05:00
2014-01-23 18:49:36 -08:00
2014-01-23 18:49:36 -08:00
2014-01-29 20:00:13 -08:00
2014-01-25 13:19:10 -08:00
2014-01-26 11:00:41 -08:00
2014-02-12 15:36:26 -05:00
2014-01-12 23:48:18 +01:00
2014-01-15 14:51:22 -08:00
2014-01-27 08:15:51 -08:00
2014-01-22 22:24:35 -08:00
2014-02-05 16:01:11 -08:00