Bluetooth: hci_sync: unlock on error in hci_inquiry_result_with_rssi_evt()

[ Upstream commit c07ba878ca199a6089cdb323bf526adbeeb4201f ]

Add unlocks to two error paths in hci_inquiry_result_with_rssi_evt().

Fixes: fee645033e2c ("Bluetooth: hci_event: Use skb_pull_data when processing inquiry results")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index fc30f4c03d292610614367370bca8856d332f610..05997dff566628d42b8827051d54ded938c4c6c2 100644 (file)
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -4534,7 +4534,7 @@ static void hci_inquiry_result_with_rssi_evt(struct hci_dev *hdev, void *edata,
                        if (!info) {
                                bt_dev_err(hdev, "Malformed HCI Event: 0x%2.2x",
                                           HCI_EV_INQUIRY_RESULT_WITH_RSSI);
-                               return;
+                               goto unlock;
                        }
 
                        bacpy(&data.bdaddr, &info->bdaddr);
@@ -4565,7 +4565,7 @@ static void hci_inquiry_result_with_rssi_evt(struct hci_dev *hdev, void *edata,
                        if (!info) {
                                bt_dev_err(hdev, "Malformed HCI Event: 0x%2.2x",
                                           HCI_EV_INQUIRY_RESULT_WITH_RSSI);
-                               return;
+                               goto unlock;
                        }
 
                        bacpy(&data.bdaddr, &info->bdaddr);
@@ -4587,7 +4587,7 @@ static void hci_inquiry_result_with_rssi_evt(struct hci_dev *hdev, void *edata,
                bt_dev_err(hdev, "Malformed HCI Event: 0x%2.2x",
                           HCI_EV_INQUIRY_RESULT_WITH_RSSI);
        }
-
+unlock:
        hci_dev_unlock(hdev);
 }