Ben Seri 6300c8bfaf Bluetooth: Properly check L2CAP config option output buffer length ...

commit e860d2c904d1a9f38a24eb44c9f34b8f915a6ea3 upstream.

Validate the output buffer length for L2CAP config requests and responses
to avoid overflowing the stack buffer used for building the option blocks.

Signed-off-by: Ben Seri <ben@armis.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-09-13 14:13:36 -07:00

..

bnep

Bluetooth: bnep: fix possible might sleep error in bnep_session

2017-08-30 10:21:52 +02:00

cmtp

Bluetooth: cmtp: fix possible might sleep error in cmtp_session

2017-08-30 10:21:52 +02:00

hidp

Bluetooth: hidp: fix possible might sleep error in hidp_session_thread

2017-08-30 10:21:52 +02:00

rfcomm

…

6lowpan.c

…

a2mp.c

…

a2mp.h

…

af_bluetooth.c

…

amp.c

…

amp.h

…

ecc.c

…

ecc.h

…

hci_conn.c

…

hci_core.c

…

hci_debugfs.c

…

hci_debugfs.h

…

hci_event.c

…

hci_request.c

…

hci_request.h

…

hci_sock.c

…

hci_sysfs.c

…

Kconfig

…

l2cap_core.c

Bluetooth: Properly check L2CAP config option output buffer length

2017-09-13 14:13:36 -07:00

l2cap_sock.c

…

leds.c

…

leds.h

…

lib.c

…

Makefile

…

mgmt_util.c

…

mgmt_util.h

…

mgmt.c

…

sco.c

…

selftest.c

…

selftest.h

…

smp.c

…

smp.h

…