Johan Hovold 62d5550ab6 Bluetooth: qca: fix info leak when fetching fw build id ...

[ Upstream commit cda0d6a198 ]

Add the missing sanity checks and move the 255-byte build-id buffer off
the stack to avoid leaking stack data through debugfs in case the
build-info reply is malformed.

Fixes: c0187b0bd3 ("Bluetooth: btqca: Add support to read FW build version for WCN3991 BTSoC")
Cc: stable@vger.kernel.org	# 5.12
Signed-off-by: Johan Hovold <johan+linaro@kernel.org>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-07-05 09:14:11 +02:00

..

ath3k.c

…

bcm203x.c

…

bfusb.c

…

bluecard_cs.c

…

bpa10x.c

…

bt3c_cs.c

…

btbcm.c

Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set

2023-05-24 17:36:46 +01:00

btbcm.h

…

btintel.c

Bluetooth: btintel: Fixe build regression

2024-04-13 13:01:48 +02:00

btintel.h

…

btmrvl_debugfs.c

…

btmrvl_drv.h

…

btmrvl_main.c

…

btmrvl_sdio.c

…

btmrvl_sdio.h

…

btmtksdio.c

…

btmtkuart.c

Bluetooth: btmtkuart: fix recv_buf() return value

2024-01-25 14:52:40 -08:00

btqca.c

Bluetooth: qca: fix info leak when fetching fw build id

2024-07-05 09:14:11 +02:00

btqca.h

Bluetooth: qca: fix info leak when fetching fw build id

2024-07-05 09:14:11 +02:00

btqcomsmd.c

Bluetooth: btqcomsmd: Fix command timeout after setting BD address

2023-03-30 12:47:50 +02:00

btrsi.c

…

btrtl.c

…

btrtl.h

…

btsdio.c

Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition

2023-09-06 21:28:39 +01:00

btusb.c

Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853

2024-05-02 16:24:48 +02:00

dtl1_cs.c

…

h4_recv.h

…

hci_ag6xx.c

…

hci_ath.c

…

hci_bcm.c

…

hci_bcsp.c

…

hci_h4.c

…

hci_h5.c

…

hci_intel.c

…

hci_ldisc.c

…

hci_ll.c

…

hci_mrvl.c

…

hci_nokia.c

Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()

2023-09-19 12:22:33 +02:00

hci_qca.c

Bluetooth: qca: add support for QCA2066

2024-07-05 09:14:11 +02:00

hci_serdev.c

…

hci_uart.h

…

hci_vhci.c

Bluetooth: vhci: Fix race when opening vhci device

2023-10-25 11:58:55 +02:00

Kconfig

…

Makefile

…

virtio_bt.c

…