En-Wei Wu 4bcb0c7dc2 Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling ...

Use skb_pull() and skb_pull_data() to safely parse QCA dump packets.

This avoids direct pointer math on skb->data, which could lead to
invalid access if the packet is shorter than expected.

Fixes: 20981ce2d5 ("Bluetooth: btusb: Add WCN6855 devcoredump support")
Signed-off-by: En-Wei Wu <en-wei.wu@canonical.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>

2025-05-15 13:12:54 -04:00

..

ath3k.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

bcm203x.c

…

bfusb.c

Bluetooth: Fix code style warning

2025-03-25 12:31:27 -04:00

bluecard_cs.c

treewide: Switch/rename to timer_delete[_sync]()

2025-04-05 10:30:12 +02:00

bpa10x.c

…

bt3c_cs.c

…

btbcm.c

Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name()

2025-01-15 10:34:27 -05:00

btbcm.h

…

btintel_pcie.c

Bluetooth: btintel_pcie: Add additional to checks to clear TX/RX paths

2025-04-25 15:03:19 -04:00

btintel_pcie.h

Bluetooth: btintel_pcie: Add support for device coredump

2025-03-25 12:44:48 -04:00

btintel.c

Bluetooth: btintel: Add support to configure TX power

2025-03-25 12:51:42 -04:00

btintel.h

t blameBluetooth: btintel: Fix leading white space

2025-03-25 12:52:00 -04:00

btmrvl_debugfs.c

…

btmrvl_drv.h

…

btmrvl_main.c

Bluetooth: Use str_enable_disable-like helpers

2025-01-15 10:36:11 -05:00

btmrvl_sdio.c

Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()

2024-09-27 10:52:19 -04:00

btmrvl_sdio.h

…

btmtk.c

Bluetooth: btmtk: Remove the resetting step before downloading the fw

2025-03-25 12:51:10 -04:00

btmtk.h

…

btmtksdio.c

Bluetooth: btmtksdio: Do close if SDIO card removed without close

2025-04-25 15:03:19 -04:00

btmtkuart.c

bluetooth: Fix typos in the comments

2024-11-14 15:28:07 -05:00

btnxpuart.c

Bluetooth: btnxpuart: Add an error message if FW dump trigger fails

2025-04-10 13:09:36 -04:00

btqca.c

Bluetooth: qca: fix NV variant for one of WCN3950 SoCs

2025-04-10 13:09:20 -04:00

btqca.h

Bluetooth: qca: add WCN3950 support

2025-03-25 12:42:35 -04:00

btqcomsmd.c

Get rid of 'remove_new' relic from platform driver struct

2024-12-01 15:12:43 -08:00

btrsi.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

btrtl.c

Bluetooth: btrtl: Prevent potential NULL dereference

2025-04-10 13:09:16 -04:00

btrtl.h

…

btsdio.c

…

btusb.c

Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling

2025-05-15 13:12:54 -04:00

dtl1_cs.c

…

h4_recv.h

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

hci_ag6xx.c

…

hci_aml.c

…

hci_ath.c

…

hci_bcm4377.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

hci_bcm.c

Get rid of 'remove_new' relic from platform driver struct

2024-12-01 15:12:43 -08:00

hci_bcsp.c

treewide: Switch/rename to timer_delete[_sync]()

2025-04-05 10:30:12 +02:00

hci_h4.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

hci_h5.c

treewide: Switch/rename to timer_delete[_sync]()

2025-04-05 10:30:12 +02:00

hci_intel.c

Get rid of 'remove_new' relic from platform driver struct

2024-12-01 15:12:43 -08:00

hci_ldisc.c

Bluetooth: hci_uart: Fix another race during initialization

2025-03-25 12:32:15 -04:00

hci_ll.c

bluetooth: Fix typos in the comments

2024-11-14 15:28:07 -05:00

hci_mrvl.c

…

hci_nokia.c

bluetooth: Fix typos in the comments

2024-11-14 15:28:07 -05:00

hci_qca.c

treewide: Switch/rename to timer_delete[_sync]()

2025-04-05 10:30:12 +02:00

hci_serdev.c

…

hci_uart.h

Bluetooth: hci_uart: Fix another race during initialization

2025-03-25 12:32:15 -04:00

hci_vhci.c

Bluetooth: vhci: Avoid needless snprintf() calls

2025-04-16 16:50:47 -04:00

Kconfig

Bluetooth: btusb: Configure altsetting for HCI_USER_CHANNEL

2025-03-07 12:43:27 -05:00

Makefile

…

virtio_bt.c

…