Luiz Augusto von Dentz 9d42f37339 Bluetooth: L2CAP: Fix not validating setsockopt user input ...

[ Upstream commit 4f3951242a ]

Check user input length before copying data.

Fixes: 33575df7be ("Bluetooth: move l2cap_sock_setsockopt() to l2cap_sock.c")
Fixes: 3ee7b7cd83 ("Bluetooth: Add BT_MODE socket option")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-04-17 11:18:25 +02:00

..

bnep

…

cmtp

…

hidp

Bluetooth: Fix race condition in hidp_session_thread

2023-04-20 12:35:06 +02:00

rfcomm

Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security

2024-03-26 18:20:27 -04:00

6lowpan.c

use less confusing names for iov_iter direction initializers

2023-02-09 11:28:04 +01:00

a2mp.c

use less confusing names for iov_iter direction initializers

2023-02-09 11:28:04 +01:00

a2mp.h

…

af_bluetooth.c

Bluetooth: af_bluetooth: Fix deadlock

2024-03-26 18:20:40 -04:00

amp.c

…

amp.h

…

aosp.c

…

aosp.h

…

ecdh_helper.c

…

ecdh_helper.h

…

eir.c

Bluetooth: Fix eir name length

2024-03-26 18:20:42 -04:00

eir.h

…

hci_codec.c

…

hci_codec.h

…

hci_conn.c

Bluetooth: hci_sync: Fix overwriting request callback

2024-03-26 18:20:40 -04:00

hci_core.c

Bluetooth: hci_sync: Fix not checking error on hci_cmd_sync_cancel_sync

2024-04-03 15:19:50 +02:00

hci_debugfs.c

Bluetooth: Fix TOCTOU in HCI debugfs implementation

2024-04-10 16:28:24 +02:00

hci_debugfs.h

…

hci_event.c

Bluetooth: hci_event: set the conn encrypted before conn establishes

2024-04-10 16:28:24 +02:00

hci_request.c

Bluetooth: Fix memory leak in hci_req_sync_complete()

2024-04-17 11:18:22 +02:00

hci_request.h

Bluetooth: Delete unused hci_req_prepare_suspend() declaration

2023-10-10 22:00:40 +02:00

hci_sock.c

Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name

2023-10-25 12:03:16 +02:00

hci_sync.c

Bluetooth: add quirk for broken address properties

2024-04-10 16:28:24 +02:00

hci_sysfs.c

Bluetooth: Fix double free in hci_conn_cleanup

2023-11-28 17:06:56 +00:00

iso.c

Bluetooth: ISO: Fix handling of listen for unicast

2023-10-10 22:00:40 +02:00

Kconfig

…

l2cap_core.c

Bluetooth: Enforce validation on max value of connection interval

2024-03-06 14:45:07 +00:00

l2cap_sock.c

Bluetooth: L2CAP: Fix not validating setsockopt user input

2024-04-17 11:18:25 +02:00

leds.c

…

leds.h

…

lib.c

…

Makefile

…

mgmt_config.c

…

mgmt_config.h

…

mgmt_util.c

…

mgmt_util.h

…

mgmt.c

Bluetooth: Fix eir name length

2024-03-26 18:20:42 -04:00

msft.c

…

msft.h

…

sco.c

Bluetooth: SCO: Fix not validating setsockopt user input

2024-04-17 11:18:25 +02:00

selftest.c

…

selftest.h

…

smp.c

Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE

2024-01-01 12:39:03 +00:00

smp.h

…