)]}'
{
  "commit": "6c2718da59613d76013b501bf0f8bcf9d7794b2d",
  "tree": "9872ff9b1cb630130f0da9c6abca771d52fb1fa8",
  "parents": [
    "485f1eff73a7b932fd3abb0dfcf804e1a1f59025"
  ],
  "author": {
    "name": "Nick Pelly",
    "email": "npelly@google.com",
    "time": "Wed Feb 03 16:18:36 2010 -0800"
  },
  "committer": {
    "name": "Marcel Holtmann",
    "email": "marcel@holtmann.org",
    "time": "Wed Feb 03 16:28:44 2010 -0800"
  },
  "message": "Bluetooth: Do not call rfcomm_session_put() for RFCOMM UA on closed socket\n\nWhen processing a RFCOMM UA frame when the socket is closed and we were\nnot the RFCOMM initiator would cause rfcomm_session_put() to be called\ntwice during rfcomm_process_rx(). This would cause a kernel panic in\nrfcomm_session_close() then.\n\nThis could be easily reproduced during disconnect with devices such as\nMotorola H270 that send RFCOMM UA followed quickly by L2CAP disconnect\nrequest. This trace for this looks like:\n\n2009-09-21 17:22:37.788895 \u003c ACL data: handle 1 flags 0x02 dlen 8\n   L2CAP(d): cid 0x0041 len 4 [psm 3]\n     RFCOMM(s): DISC: cr 0 dlci 20 pf 1 ilen 0 fcs 0x7d\n2009-09-21 17:22:37.906204 \u003e HCI Event: Number of Completed Packets (0x13) plen 5\n   handle 1 packets 1\n2009-09-21 17:22:37.933090 \u003e ACL data: handle 1 flags 0x02 dlen 8\n   L2CAP(d): cid 0x0040 len 4 [psm 3]\n     RFCOMM(s): UA: cr 0 dlci 20 pf 1 ilen 0 fcs 0x57\n2009-09-21 17:22:38.636764 \u003c ACL data: handle 1 flags 0x02 dlen 8\n   L2CAP(d): cid 0x0041 len 4 [psm 3]\n     RFCOMM(s): DISC: cr 0 dlci 0 pf 1 ilen 0 fcs 0x9c\n2009-09-21 17:22:38.744125 \u003e HCI Event: Number of Completed Packets (0x13) plen 5\n   handle 1 packets 1\n2009-09-21 17:22:38.763687 \u003e ACL data: handle 1 flags 0x02 dlen 8\n   L2CAP(d): cid 0x0040 len 4 [psm 3]\n     RFCOMM(s): UA: cr 0 dlci 0 pf 1 ilen 0 fcs 0xb6\n2009-09-21 17:22:38.783554 \u003e ACL data: handle 1 flags 0x02 dlen 12\n   L2CAP(s): Disconn req: dcid 0x0040 scid 0x0041\n\nAvoid calling rfcomm_session_put() twice by skipping this call\nin rfcomm_recv_ua() if the socket is closed.\n\nSigned-off-by: Nick Pelly \u003cnpelly@google.com\u003e\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "2b506373957ab90ded8d435b6b7bb913b2b5a34e",
      "old_mode": 33188,
      "old_path": "net/bluetooth/rfcomm/core.c",
      "new_id": "89f4a59eb82b9a520886a35e6b3aa65a6286ea70",
      "new_mode": 33188,
      "new_path": "net/bluetooth/rfcomm/core.c"
    }
  ]
}