linux-stable/net/bluetooth
Brian Gix 5a539c08d7 Bluetooth: refactor malicious adv data check
commit 899663be5e upstream.

Check for out-of-bound read was being performed at the end of while
num_reports loop, and would fill journal with false positives. Added
check to beginning of loop processing so that it doesn't get checked
after ptr has been advanced.

Signed-off-by: Brian Gix <brian.gix@intel.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Cc: syphyr <syphyr@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-02-08 18:16:23 +01:00
..
bnep Bluetooth: bnep: fix possible might sleep error in bnep_session 2017-06-27 19:32:11 +02:00
cmtp Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails 2022-01-27 09:00:48 +01:00
hidp Bluetooth: hidp: use correct wait queue when removing ctrl_wait 2021-08-26 08:37:08 -04:00
rfcomm Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl 2020-04-13 10:34:35 +02:00
6lowpan.c Bluetooth: add a mutex lock to avoid UAF in do_enale_set 2020-08-21 09:48:04 +02:00
a2mp.c Bluetooth: drop HCI device reference before return 2021-03-03 18:22:38 +01:00
a2mp.h
af_bluetooth.c net: use skb_queue_empty_lockless() in poll() handlers 2019-11-10 11:25:34 +01:00
amp.c Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data 2021-03-07 11:27:44 +01:00
amp.h
ecdh_helper.c Bluetooth: Delete error messages for failed memory allocations in two functions 2017-05-22 10:23:41 +02:00
ecdh_helper.h
hci_conn.c Bluetooth: Disconnect if E0 is used for Level 4 2020-10-17 10:29:54 +02:00
hci_core.c Bluetooth: Fix debugfs entry leak in hci_register_dev() 2022-01-27 09:00:53 +01:00
hci_debugfs.c
hci_debugfs.h
hci_event.c Bluetooth: refactor malicious adv data check 2022-02-08 18:16:23 +01:00
hci_request.c bluetooth: eliminate the potential race condition when removing the HCI controller 2021-05-22 10:57:24 +02:00
hci_request.h
hci_sock.c Bluetooth: defer cleanup of resources in hci_unregister_dev() 2021-08-15 13:03:30 +02:00
hci_sysfs.c Bluetooth: defer cleanup of resources in hci_unregister_dev() 2021-08-15 13:03:30 +02:00
Kconfig Revert "Bluetooth: Add option for disabling legacy ioctl interfaces" 2017-09-28 13:20:32 -07:00
l2cap_core.c Bluetooth: initialize skb_queue_head at l2cap_chan_create() 2021-05-22 10:57:36 +02:00
l2cap_sock.c Bluetooth: fix use-after-free error in lock_sock_nested() 2021-11-26 11:40:26 +01:00
leds.c
leds.h
lib.c Bluetooth: make baswap src const 2017-09-01 22:49:47 +02:00
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
mgmt.c Bluetooth: Fix the HCI to MGMT status conversion table 2021-07-20 16:17:45 +02:00
mgmt_util.c networking: make skb_push & __skb_push return void pointers 2017-06-16 11:48:40 -04:00
mgmt_util.h
sco.c Bluetooth: fix init and cleanup of sco_conn.timeout_work 2022-01-27 09:00:47 +01:00
selftest.c Bluetooth: kfree tmp rather than an alias to it 2017-08-11 21:19:46 +02:00
selftest.h
smp.c Bluetooth: SMP: Fail if remote and local public keys are identical 2021-05-26 11:47:01 +02:00
smp.h Bluetooth: SMP: fix crash in unpairing 2018-11-04 14:52:39 +01:00