]> dgit.raspbian.org Git - linux-4.9.git/commit
projects / linux-4.9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8b8605e) | patch
Bluetooth: Properly check L2CAP config option output buffer length
authorBen Seri <ben@armis.com>
Sat, 9 Sep 2017 21:15:59 +0000 (23:15 +0200)
committerBen Hutchings <ben@decadent.org.uk>
Tue, 19 Sep 2017 01:34:05 +0000 (02:34 +0100)
commit126068bc1c3693a9010ab4aca225ae528d4c330f
treea3333a8a8d396900371638b05d68a5febca0989ctree | snapshot
parent8b8605e1415af3f45736e8d0f61eca5c10bc6454commit | diff
Bluetooth: Properly check L2CAP config option output buffer length

Validate the output buffer length for L2CAP config requests and responses
to avoid overflowing the stack buffer used for building the option blocks.

Cc: stable@vger.kernel.org
Signed-off-by: Ben Seri <ben@armis.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name bluetooth-properly-check-l2cap-config-option-output-.patch
net/bluetooth/l2cap_core.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.