]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
Bluetooth: refactor malicious adv data check
authorBrian Gix <brian.gix@intel.com>
Wed, 24 Nov 2021 20:16:28 +0000 (12:16 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 8 Feb 2022 17:23:02 +0000 (18:23 +0100)
commit8819f93cd4a443dfe547aa622b21f723757df3fb
tree1c388e315479faf2438e22ebe6773e2d0e02dc00
parentf4b1bd6d9c2e2818ad1ef2483471c8b9a5c0a01c
Bluetooth: refactor malicious adv data check

commit 899663be5e75dc0174dc8bda0b5e6826edf0b29a upstream.

Check for out-of-bound read was being performed at the end of while
num_reports loop, and would fill journal with false positives. Added
check to beginning of loop processing so that it doesn't get checked
after ptr has been advanced.

Signed-off-by: Brian Gix <brian.gix@intel.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Cc: syphyr <syphyr@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/bluetooth/hci_event.c