]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2d2e3e7) | patch
Bluetooth: Properly check L2CAP config option output buffer length
authorBen Seri <ben@armis.com>
Sat, 9 Sep 2017 21:15:59 +0000 (23:15 +0200)
committerLinus Torvalds <torvalds@linux-foundation.org>
Sun, 10 Sep 2017 00:56:05 +0000 (17:56 -0700)
commit647f76f39a9e633716f7ca1da6ec40ce021c97dd
treeec7c665df89fb1e72b735a7ac326d2ded6eeaaa2tree | snapshot
parent2d2e3e78317a634adb595778237f3ec7c5ff58facommit | diff
Bluetooth: Properly check L2CAP config option output buffer length

Validate the output buffer length for L2CAP config requests and responses
to avoid overflowing the stack buffer used for building the option blocks.

Cc: stable@vger.kernel.org
Signed-off-by: Ben Seri <ben@armis.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
net/bluetooth/l2cap_core.c diff | blob | history
Linux Kernel Source Tree.