From: Anton Protopopov <[email protected]>
Date: Wed, 17 Feb 2016 11:19:56 -0500

> A return value of the bchannel_get_rxbuf() function is compared with the
> positive ENOMEM value instead of the negative -ENOMEM value to detect a
> memory allocation problem. Thus, after a possible memory allocation
> failure the bc->bch.rx_skb will be NULL which will lead to a NULL
> pointer dereference.
> 
> Signed-off-by: Anton Protopopov <[email protected]>

Applied.

Reply via email to