]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/commit
Bluetooth: refactor malicious adv data check
authorBrian Gix <brian.gix@intel.com>
Wed, 24 Nov 2021 20:16:28 +0000 (12:16 -0800)
committerPaolo Pisati <paolo.pisati@canonical.com>
Thu, 3 Feb 2022 09:28:55 +0000 (10:28 +0100)
commit36737f1ccb7326084b88a3498d517e9b0b83532b
treeeb3b6ba71e859548a502484c9464616b165a936c
parent0f6d2469ddd8c481c9471cb62d411f4f1862fa57
Bluetooth: refactor malicious adv data check

BugLink: https://bugs.launchpad.net/bugs/1959879
commit 899663be5e75dc0174dc8bda0b5e6826edf0b29a upstream.

Check for out-of-bound read was being performed at the end of while
num_reports loop, and would fill journal with false positives. Added
check to beginning of loop processing so that it doesn't get checked
after ptr has been advanced.

Signed-off-by: Brian Gix <brian.gix@intel.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Cc: syphyr <syphyr@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
net/bluetooth/hci_event.c