]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
Bluetooth: Fix NULL pointer deference on eir_get_service_data
authorLuiz Augusto von Dentz <luiz.von.dentz@intel.com>
Thu, 5 Jun 2025 15:14:25 +0000 (11:14 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 19 Jun 2025 13:32:30 +0000 (15:32 +0200)
commit842f7c3154d5b25ca11753c02ee8cf6ee64c0142
tree30669f7eeb9010894d78156f32aa309701165a72
parent31bf7b2b92563a352788cf9df3698682f659bacc
Bluetooth: Fix NULL pointer deference on eir_get_service_data

[ Upstream commit 20a2aa01f5aeb6daad9aeaa7c33dd512c58d81eb ]

The len parameter is considered optional so it can be NULL so it cannot
be used for skipping to next entry of EIR_SERVICE_DATA.

Fixes: 8f9ae5b3ae80 ("Bluetooth: eir: Add helpers for managing service data")
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/bluetooth/eir.c