linux

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-10-16 15:59:14 -05:00

Files

T

Johan Hedberg 6c0c331e4c Bluetooth: Check for minimum data length in eir_has_data_type()

If passed 0 as data_length the (parsed < data_length - 1) test will be
true and cause a buffer overflow. In practice we need at least two bytes
for the element length and type so add a test for it to the very
beginning of the function.

Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
Acked-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Gustavo Padovan <gustavo@padovan.org>

2012-03-28 12:02:40 -03:00

bluetooth.h

Bluetooth: Remove unneeded bt_cb(skb)->channel variable

2012-02-20 15:55:37 +02:00

hci_core.h

Bluetooth: Check for minimum data length in eir_has_data_type()

2012-03-28 12:02:40 -03:00

hci_mon.h

Bluetooth: Fix coding style in all .h files

2012-03-07 00:04:25 -03:00

hci.h

Bluetooth: hci_core: fix NULL-pointer dereference at unregister