If h4_recv_buf() return ERR_PTR instead sk_buff pointer, it should be
cleared once PTR_ERR is completed for the further dereference such as
h4_recv(), or h4_close().
BUG=chrome-os-partner:40628, chrome-os-partner:43150
TEST=Stress BT on Broadcom devices
Change-Id: I849df3cfc4a9d74e781be0c5a72cada1667c884f
Signed-off-by: Chan-yeol Park <chanyeol.park@samsung.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Doug Anderson <dianders@chromium.org>
(cherry picked from commit 3713416763)
Reviewed-on: https://chromium-review.googlesource.com/289342
Reviewed-by: Arman Uguray <armansito@chromium.org>
952f856008