Bluetooth: Fix memory leak with L2CAP channels

A new l2cap_chan_free() is added to free the channels.

Signed-off-by: Gustavo F. Padovan <padovan@profusion.mobi>

1 files changed, 2 insertions, 0 deletions

diff --git a/net/bluetooth/l2cap_sock.c b/net/bluetooth/l2cap_sock.c
index 61d93f6c36c8..0e23ebdf7c8f 100644
--- a/net/bluetooth/l2cap_sock.c
+++ b/net/bluetooth/l2cap_sock.c
@@ -849,6 +849,8 @@ void l2cap_sock_kill(struct sock *sk)
         BT_DBG("sk %p state %d", sk, sk->sk_state);
 
         /* Kill poor orphan */
+
+        l2cap_chan_free(l2cap_pi(sk)->chan);
         bt_sock_unlink(&l2cap_sk_list, sk);
         sock_set_flag(sk, SOCK_DEAD);
         sock_put(sk);