]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/commit
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
authorColin Ian King <colin.king@canonical.com>
Wed, 4 Aug 2021 15:09:51 +0000 (16:09 +0100)
committerMarcel Holtmann <marcel@holtmann.org>
Thu, 5 Aug 2021 13:05:37 +0000 (15:05 +0200)
commit713baf3dae8f45dc8ada4ed2f5fdcbf94a5c274d
tree5830683a2c0daae76096b2463f5133861b8f7a7b
parent6eefec4a0b668de9bbb33bd3e7acfbcc794162b0
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow

An earlier commit replaced using batostr to using %pMR sprintf for the
construction of session->name. Static analysis detected that this new
method can use a total of 21 characters (including the trailing '\0')
so we need to increase the BTNAMSIZ from 18 to 21 to fix potential
buffer overflows.

Addresses-Coverity: ("Out-of-bounds write")
Fixes: fcb73338ed53 ("Bluetooth: Use %pMR in sprintf/seq_printf instead of batostr")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
net/bluetooth/cmtp/cmtp.h