Griffin Kroah-Hartman
90e1ff1c15
Bluetooth: MGMT: Add error handling to pair_device()
...
commit 538fd3921afac97158d4177139a0ad39f056dbb2 upstream.
hci_conn_params_add() never checks for a NULL value and could lead to a NULL
pointer dereference causing a crash.
Fixed by adding error handling in the function.
Cc: Stable <stable@kernel.org>
Fixes: 5157b8a503 ("Bluetooth: Fix initializing conn_params in scan phase")
Signed-off-by: Griffin Kroah-Hartman <griffin@kroah.com>
Reported-by: Yiwei Zhang <zhan4630@purdue.edu>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-09-04 13:15:01 +02:00
..
bnep
Bluetooth: bnep: Fix out-of-bound access
2024-09-04 13:14:57 +02:00
cmtp
hidp
Bluetooth: Fix race condition in hidp_session_thread
2023-04-20 12:07:35 +02:00
rfcomm
Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
2024-03-26 18:22:13 -04:00
6lowpan.c
Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()
2022-12-14 11:30:45 +01:00
a2mp.c
a2mp.h
af_bluetooth.c
Bluetooth: Fix not cleanup led when bt_init fails
2022-12-14 11:30:45 +01:00
amp.c
amp.h
ecdh_helper.c
ecdh_helper.h
hci_conn.c
Bluetooth: Fix bogus check for re-auth no supported with non-ssp
2024-01-25 14:34:26 -08:00
hci_core.c
Bluetooth: hci_core: Fix LE quote calculation
2024-09-04 13:14:59 +02:00
hci_debugfs.c
Bluetooth: Fix TOCTOU in HCI debugfs implementation
2024-04-13 12:51:33 +02:00
hci_debugfs.h
hci_event.c
Bluetooth: hci_event: set the conn encrypted before conn establishes
2024-04-13 12:51:33 +02:00
hci_request.c
Bluetooth: Fix memory leak in hci_req_sync_complete()
2024-05-02 16:18:28 +02:00
hci_request.h
hci_sock.c
Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name
2023-10-25 11:53:25 +02:00
hci_sysfs.c
Bluetooth: Fix double free in hci_conn_cleanup
2023-11-28 16:50:14 +00:00
Kconfig
l2cap_core.c
Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()
2024-08-19 05:33:46 +02:00
l2cap_sock.c
Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
2024-05-02 16:18:36 +02:00
leds.c
leds.h
lib.c
Makefile
mgmt.c
Bluetooth: MGMT: Add error handling to pair_device()
2024-09-04 13:15:01 +02:00
mgmt_util.c
mgmt_util.h
sco.c
Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
2024-05-17 11:43:53 +02:00
selftest.c
selftest.h
smp.c
smp.h