Ben Seri e860d2c904 Bluetooth: Properly check L2CAP config option output buffer length ...

Validate the output buffer length for L2CAP config requests and responses
to avoid overflowing the stack buffer used for building the option blocks.

Cc: stable@vger.kernel.org
Signed-off-by: Ben Seri <ben@armis.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2017-09-09 17:56:05 -07:00

..

bnep

Bluetooth: bnep: fix possible might sleep error in bnep_session

2017-06-27 19:32:11 +02:00

cmtp

Bluetooth: cmtp: fix possible might sleep error in cmtp_session

2017-06-27 19:32:11 +02:00

hidp

HID: introduce hid_is_using_ll_driver

2017-07-27 15:14:28 +02:00

rfcomm

Merge branch 'for-upstream' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next

2017-07-01 15:57:29 -07:00

6lowpan.c

6lowpan: fix set not used warning

2017-07-25 12:31:37 -07:00

a2mp.c

networking: make skb_pull & friends return void pointers

2017-06-16 11:48:39 -04:00

a2mp.h

Bluetooth: Add BT_HS config option

2015-07-30 13:31:59 +02:00

af_bluetooth.c

net: convert sock.sk_refcnt from atomic_t to refcount_t

2017-07-01 07:39:08 -07:00

amp.c

Bluetooth: fix assignments on error variable err

2017-04-12 22:02:38 +02:00

amp.h

Bluetooth: Add BT_HS config option

2015-07-30 13:31:59 +02:00

ecdh_helper.c

Bluetooth: Delete error messages for failed memory allocations in two functions

2017-05-22 10:23:41 +02:00

ecdh_helper.h

Bluetooth: convert smp and selftest to crypto kpp API

2017-04-25 04:53:42 +02:00

hci_conn.c

Bluetooth: Fix using the correct source address type

2016-11-22 22:50:46 +01:00

hci_core.c

bluetooth: remove WQ_MEM_RECLAIM from hci workqueues

2017-06-29 14:36:38 +02:00

hci_debugfs.c

Bluetooth: Add debugfs fields for hardware and firmware info

2016-07-18 09:33:28 +03:00

hci_debugfs.h

Bluetooth: Provide option to enable/disable debugfs information

2015-02-15 18:54:13 +02:00

hci_event.c

Bluetooth: fix spelling mistake: "advetising" -> "advertising"

2017-02-16 17:39:35 +01:00

hci_request.c

networking: make skb_put & friends return void pointers

2017-06-16 11:48:39 -04:00

hci_request.h

Bluetooth: Fix append max 11 bytes of name to scan rsp data

2016-10-19 18:42:37 +02:00

hci_sock.c

Bluetooth: Add option for disabling legacy ioctl interfaces

2017-08-30 22:00:19 +03:00

hci_sysfs.c

Bluetooth: make device_type const

2017-08-19 11:55:31 +02:00

Kconfig

Bluetooth: Add option for disabling legacy ioctl interfaces

2017-08-30 22:00:19 +03:00

l2cap_core.c

Bluetooth: Properly check L2CAP config option output buffer length

2017-09-09 17:56:05 -07:00

l2cap_sock.c

Bluetooth: Add sockaddr length checks before accessing sa_family in bind and connect handlers

2017-06-29 14:37:57 +02:00

leds.c

Bluetooth: Add combined LED trigger for controller power

2016-09-19 20:19:34 +02:00

leds.h

Bluetooth: Add combined LED trigger for controller power

2016-09-19 20:19:34 +02:00

lib.c

Bluetooth: make baswap src const

2017-09-01 22:49:47 +02:00

Makefile

Bluetooth: convert smp and selftest to crypto kpp API

2017-04-25 04:53:42 +02:00

mgmt_util.c

networking: make skb_push & __skb_push return void pointers

2017-06-16 11:48:40 -04:00

mgmt_util.h

Bluetooth: Add generic mgmt helper API

2015-03-17 18:03:08 +01:00

mgmt.c

Bluetooth: Fix append max 11 bytes of name to scan rsp data

2016-10-19 18:42:37 +02:00

sco.c

Bluetooth: Add sockaddr length checks before accessing sa_family in bind and connect handlers

2017-06-29 14:37:57 +02:00

selftest.c

Bluetooth: kfree tmp rather than an alias to it

2017-08-11 21:19:46 +02:00

selftest.h

Bluetooth: Add support for self testing framework

2014-12-30 08:53:55 +02:00

smp.c

Bluetooth: use constant time memory comparison for secret values

2017-06-10 15:45:40 +02:00

smp.h

Bluetooth: SMP: Add support for H7 crypto function and CT2 auth flag

2016-12-08 07:50:24 +01:00