)]}'
{
  "commit": "a49184c229535ebedbb659214db2d4d1d77b7c07",
  "tree": "6a06bba4cf178a45d2f1ad61d91c4e3adee46cd4",
  "parents": [
    "d31dbf6e5989b2fd9a30ec5b25436e94f009d6df"
  ],
  "author": {
    "name": "Andrei Emeltchenko",
    "email": "andrei.emeltchenko@nokia.com",
    "time": "Wed Nov 03 12:32:44 2010 +0200"
  },
  "committer": {
    "name": "Gustavo F. Padovan",
    "email": "padovan@profusion.mobi",
    "time": "Wed Dec 01 21:04:36 2010 -0200"
  },
  "message": "Bluetooth: Check sk is not owned before freeing l2cap_conn\n\nCheck that socket sk is not locked in user process before removing\nl2cap connection handler.\n\nlock_sock and release_sock do not hold a normal spinlock directly but\ninstead hold the owner field. This means bh_lock_sock can still execute\neven if the socket is \"locked\". More info can be found here:\nhttp://www.linuxfoundation.org/collaborate/workgroups/networking/socketlocks\n\nkrfcommd kernel thread may be preempted with l2cap tasklet which remove\nl2cap_conn structure. If krfcommd is in process of sending of RFCOMM reply\n(like \"RFCOMM UA\" reply to \"RFCOMM DISC\") then kernel crash happens.\n\n...\n[  694.175933] Unable to handle kernel NULL pointer dereference at virtual address 00000000\n[  694.184936] pgd \u003d c0004000\n[  694.187683] [00000000] *pgd\u003d00000000\n[  694.191711] Internal error: Oops: 5 [#1] PREEMPT\n[  694.196350] last sysfs file: /sys/devices/platform/hci_h4p/firmware/hci_h4p/loading\n[  694.260375] CPU: 0    Not tainted  (2.6.32.10 #1)\n[  694.265106] PC is at l2cap_sock_sendmsg+0x43c/0x73c [l2cap]\n[  694.270721] LR is at 0xd7017303\n...\n[  694.525085] Backtrace:\n[  694.527587] [\u003cbf266be0\u003e] (l2cap_sock_sendmsg+0x0/0x73c [l2cap]) from [\u003cc02f2cc8\u003e] (sock_sendmsg+0xb8/0xd8)\n[  694.537292] [\u003cc02f2c10\u003e] (sock_sendmsg+0x0/0xd8) from [\u003cc02f3044\u003e] (kernel_sendmsg+0x48/0x80)\n\nSigned-off-by: Andrei Emeltchenko \u003candrei.emeltchenko@nokia.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "cd8f6ea038414ce21794f05f219f37716eea43e0",
      "old_mode": 33188,
      "old_path": "net/bluetooth/l2cap.c",
      "new_id": "4ed38272df78f87379345c8426f76e6e995c597a",
      "new_mode": 33188,
      "new_path": "net/bluetooth/l2cap.c"
    }
  ]
}