Ben Seri
6300c8bfaf
Bluetooth: Properly check L2CAP config option output buffer length ...
commit e860d2c904d1a9f38a24eb44c9f34b8f915a6ea3 upstream.
Validate the output buffer length for L2CAP config requests and responses
to avoid overflowing the stack buffer used for building the option blocks.
Signed-off-by: Ben Seri <ben@armis.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-09-13 14:13:36 -07:00
Bluetooth: bnep: fix possible might sleep error in bnep_session
2017-08-30 10:21:52 +02:00
Bluetooth: cmtp: fix possible might sleep error in cmtp_session
2017-08-30 10:21:52 +02:00
Bluetooth: hidp: fix possible might sleep error in hidp_session_thread
2017-08-30 10:21:52 +02:00
Bluetooth: Fix using the correct source address type
2016-11-22 22:50:46 +01:00
Bluetooth: Fix using the correct source address type
2016-11-22 22:50:46 +01:00
Bluetooth: Move get info completed callback to a2mp.c
2015-07-30 13:37:22 +02:00
Bluetooth: Add BT_HS config option
2015-07-30 13:31:59 +02:00
Bluetooth: Use numbers for subsystem version string
2016-09-19 20:19:34 +02:00
Bluetooth: Fix breakage in amp_write_rem_assoc_frag()
2015-08-10 20:41:34 +02:00
Bluetooth: Add BT_HS config option
2015-07-30 13:31:59 +02:00
Bluetooth: Add ECC library for LE Secure Connections
2014-12-03 16:51:16 +01:00
Bluetooth: Add ECC library for LE Secure Connections
2014-12-03 16:51:16 +01:00
Bluetooth: Fix using the correct source address type
2016-11-22 22:50:46 +01:00
Bluetooth: Fix wrong New Settings event when closing HCI User Channel
2016-09-19 20:19:34 +02:00
Bluetooth: Add debugfs fields for hardware and firmware info
2016-07-18 09:33:28 +03:00
Bluetooth: Provide option to enable/disable debugfs information
2015-02-15 18:54:13 +02:00
Bluetooth: Add Authentication Failed reason to Disconnected Mgmt event
2016-07-13 08:32:12 +03:00
Bluetooth: Fix append max 11 bytes of name to scan rsp data
2016-10-19 18:42:37 +02:00
Bluetooth: Fix append max 11 bytes of name to scan rsp data
2016-10-19 18:42:37 +02:00
Bluetooth: Fix user channel for 32bit userspace on 64bit kernel
2017-05-20 14:28:41 +02:00
Bluetooth: Remove controller device attributes
2016-07-09 21:37:11 +03:00
Bluetooth: add LED trigger for indicating HCI is powered up
2016-02-23 20:29:35 +01:00
Bluetooth: Properly check L2CAP config option output buffer length
2017-09-13 14:13:36 -07:00
Bluetooth: split sk_filter in l2cap_sock_recv_cb
2016-08-24 16:55:04 +02:00
Bluetooth: Add combined LED trigger for controller power
2016-09-19 20:19:34 +02:00
Bluetooth: Add combined LED trigger for controller power
2016-09-19 20:19:34 +02:00
Bluetooth: Add BT_WARN and bt_dev_warn logging macros
2015-09-24 16:25:44 +02:00
Bluetooth: add LED trigger for indicating HCI is powered up
2016-02-23 20:29:35 +01:00
Bluetooth: Fix append max 11 bytes of name to scan rsp data
2016-10-19 18:42:37 +02:00
Bluetooth: Add support for sending MGMT commands and events to monitor
2016-09-19 20:19:34 +02:00
Bluetooth: Add generic mgmt helper API
2015-03-17 18:03:08 +01:00
Bluetooth: Fix using the correct source address type
2016-11-22 22:50:46 +01:00
Bluetooth: Export ECDH selftest result in debugfs
2015-04-02 08:47:38 +03:00
Bluetooth: Add support for self testing framework
2014-12-30 08:53:55 +02:00
Bluetooth: use constant time memory comparison for secret values
2017-07-27 15:07:58 -07:00
Bluetooth: Fix crash in SMP when unpairing
2015-10-22 09:02:03 +02:00
6300c8bfaf