]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
Bluetooth: Fix NULL pointer deference on eir_get_service_data
authorLuiz Augusto von Dentz <luiz.von.dentz@intel.com>
Thu, 5 Jun 2025 15:14:25 +0000 (11:14 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 27 Jun 2025 10:07:23 +0000 (11:07 +0100)
commit497c9d2d7d3983826bb02c10fb4a5818be6550fb
treea40951c33566b3982640ab363876ff9e69ed1b92
parent73d478234a619f3476028cb02dee699c30ae8262
Bluetooth: Fix NULL pointer deference on eir_get_service_data

[ Upstream commit 20a2aa01f5aeb6daad9aeaa7c33dd512c58d81eb ]

The len parameter is considered optional so it can be NULL so it cannot
be used for skipping to next entry of EIR_SERVICE_DATA.

Fixes: 8f9ae5b3ae80 ("Bluetooth: eir: Add helpers for managing service data")
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/bluetooth/eir.c