linux_dsm_epyc7002/net/bluetooth
Ben Seri e860d2c904 Bluetooth: Properly check L2CAP config option output buffer length
Validate the output buffer length for L2CAP config requests and responses
to avoid overflowing the stack buffer used for building the option blocks.

Cc: stable@vger.kernel.org
Signed-off-by: Ben Seri <ben@armis.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2017-09-09 17:56:05 -07:00
..
bnep Bluetooth: bnep: fix possible might sleep error in bnep_session 2017-06-27 19:32:11 +02:00
cmtp Bluetooth: cmtp: fix possible might sleep error in cmtp_session 2017-06-27 19:32:11 +02:00
hidp HID: introduce hid_is_using_ll_driver 2017-07-27 15:14:28 +02:00
rfcomm Merge branch 'for-upstream' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next 2017-07-01 15:57:29 -07:00
6lowpan.c 6lowpan: fix set not used warning 2017-07-25 12:31:37 -07:00
a2mp.c
a2mp.h
af_bluetooth.c net: convert sock.sk_refcnt from atomic_t to refcount_t 2017-07-01 07:39:08 -07:00
amp.c
amp.h
ecdh_helper.c
ecdh_helper.h
hci_conn.c
hci_core.c bluetooth: remove WQ_MEM_RECLAIM from hci workqueues 2017-06-29 14:36:38 +02:00
hci_debugfs.c
hci_debugfs.h
hci_event.c
hci_request.c
hci_request.h
hci_sock.c Bluetooth: Add option for disabling legacy ioctl interfaces 2017-08-30 22:00:19 +03:00
hci_sysfs.c Bluetooth: make device_type const 2017-08-19 11:55:31 +02:00
Kconfig Bluetooth: Add option for disabling legacy ioctl interfaces 2017-08-30 22:00:19 +03:00
l2cap_core.c Bluetooth: Properly check L2CAP config option output buffer length 2017-09-09 17:56:05 -07:00
l2cap_sock.c Bluetooth: Add sockaddr length checks before accessing sa_family in bind and connect handlers 2017-06-29 14:37:57 +02:00
leds.c
leds.h
lib.c Bluetooth: make baswap src const 2017-09-01 22:49:47 +02:00
Makefile
mgmt_util.c
mgmt_util.h
mgmt.c
sco.c Bluetooth: Add sockaddr length checks before accessing sa_family in bind and connect handlers 2017-06-29 14:37:57 +02:00
selftest.c Bluetooth: kfree tmp rather than an alias to it 2017-08-11 21:19:46 +02:00
selftest.h
smp.c
smp.h