Dmitry Antipov 5caf0ffaf9 Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() ...

[ Upstream commit c531e63871 ]

Add missing call to 'l2cap_chan_unlock()' on receive error handling
path in 'l2cap_conless_channel()'.

Fixes: a24cce144b ("Bluetooth: Fix reference counting of global L2CAP channels")
Reported-by: syzbot+45ac74737e866894acb0@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=45ac74737e866894acb0
Signed-off-by: Dmitry Antipov <dmantipov@yandex.ru>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-08-19 05:45:36 +02:00

..

bnep

exit: Rename module_put_and_exit to module_put_and_kthread_exit

2024-04-10 16:18:55 +02:00

cmtp

exit: Rename module_put_and_exit to module_put_and_kthread_exit

2024-04-10 16:18:55 +02:00

hidp

exit: Rename module_put_and_exit to module_put_and_kthread_exit

2024-04-10 16:18:55 +02:00

rfcomm

Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security

2024-03-26 18:21:13 -04:00

6lowpan.c

Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()

2022-12-14 11:37:24 +01:00

a2mp.c

…

a2mp.h

…

af_bluetooth.c

Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg

2024-01-05 15:13:39 +01:00

amp.c

…

amp.h

…

aosp.c

…

aosp.h

…

ecdh_helper.c

…

ecdh_helper.h

…

hci_conn.c

Bluetooth: Fix bogus check for re-auth no supported with non-ssp

2024-01-25 14:52:40 -08:00

hci_core.c

Bluetooth: hci_core: cancel all works upon hci_unregister_dev()

2024-07-27 10:46:13 +02:00

hci_debugfs.c

Bluetooth: Fix TOCTOU in HCI debugfs implementation

2024-04-10 16:19:37 +02:00

hci_debugfs.h

…

hci_event.c

Bluetooth: hci_event: set the conn encrypted before conn establishes

2024-04-10 16:19:36 +02:00

hci_request.c

Bluetooth: Fix memory leak in hci_req_sync_complete()

2024-04-17 11:15:13 +02:00

hci_request.h

…

hci_sock.c

Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name

2023-10-25 11:59:04 +02:00

hci_sysfs.c

Bluetooth: Fix double free in hci_conn_cleanup

2023-11-28 16:56:16 +00:00

Kconfig

…

l2cap_core.c

Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()

2024-08-19 05:45:36 +02:00

l2cap_sock.c

Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()

2024-05-02 16:24:48 +02:00

leds.c

…

leds.h

…

lib.c

…

Makefile

…

mgmt_config.c

…

mgmt_config.h

…

mgmt_util.c

…

mgmt_util.h

…

mgmt.c

Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE

2024-01-05 15:13:34 +01:00

msft.c

…

msft.h

…

sco.c

Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout

2024-05-17 11:50:57 +02:00

selftest.c

…

selftest.h

…

smp.c

Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE

2024-01-05 15:13:34 +01:00

smp.h

…