Lin Ma e305509e67 Bluetooth: use correct lock to prevent UAF of hdev object ...

The hci_sock_dev_event() function will cleanup the hdev object for
sockets even if this object may still be in used within the
hci_sock_bound_ioctl() function, result in UAF vulnerability.

This patch replace the BH context lock to serialize these affairs
and prevent the race condition.

Signed-off-by: Lin Ma <linma@zju.edu.cn>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>

2021-05-31 14:33:26 +02:00

..

bnep

…

cmtp

…

hidp

Bluetooth: hidp: use correct wait queue when removing ctrl_wait

2020-11-09 14:02:47 +01:00

rfcomm

Merge branch 'for-upstream' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next

2020-07-31 15:11:52 -07:00

6lowpan.c

Bluetooth: Coding style fix

2021-04-02 11:03:04 +02:00

a2mp.c

Bluetooth: drop HCI device reference before return

2021-01-25 16:13:52 +01:00

a2mp.h

…

af_bluetooth.c

Bluetooth: fix indentation and alignment reported by checkpatch

2021-01-29 16:51:45 +01:00

amp.c

Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data

2021-02-02 17:23:14 +01:00

amp.h

…

aosp.c

Bluetooth: Add support for reading AOSP vendor capabilities

2021-04-06 14:11:23 -07:00

aosp.h

Bluetooth: Add support for reading AOSP vendor capabilities

2021-04-06 14:11:23 -07:00

ecdh_helper.c

crypto: ecdh - move curve_id of ECDH from the key to algorithm name

2021-03-13 00:04:03 +11:00

ecdh_helper.h

Fix misc new gcc warnings

2021-04-27 17:05:53 -07:00

hci_conn.c

Bluetooth: avoid deadlock between hci_dev->lock and socket lock

2021-03-16 15:29:25 +01:00

hci_core.c

Bluetooth: fix the erroneous flush_work() order

2021-05-27 18:16:17 +02:00

hci_debugfs.c

Bluetooth: Coding style fix

2021-04-02 11:03:04 +02:00

hci_debugfs.h

…

hci_event.c

Bluetooth: Use ext adv handle from requests in CCs

2021-04-06 10:43:25 +02:00

hci_request.c

Merge tag 'net-next-5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2021-04-29 11:57:23 -07:00

hci_request.h

Bluetooth: Resume advertising after LE connection

2020-11-09 13:33:19 +01:00

hci_sock.c

Bluetooth: use correct lock to prevent UAF of hdev object

2021-05-31 14:33:26 +02:00

hci_sysfs.c

…

Kconfig

Bluetooth: Add support for reading AOSP vendor capabilities

2021-04-06 14:11:23 -07:00

l2cap_core.c

Bluetooth: use the correct print format for L2CAP debug statements

2021-04-06 10:40:20 +02:00

l2cap_sock.c

Bluetooth: check for zapped sk before connecting

2021-03-23 16:03:48 +01:00

leds.c

…

leds.h

…

lib.c

…

Makefile

Bluetooth: Add support for reading AOSP vendor capabilities

2021-04-06 14:11:23 -07:00

mgmt_config.c

Bluetooth: Add toggle to switch off interleave scan

2020-12-07 17:01:00 +02:00

mgmt_config.h

…

mgmt_util.c

…

mgmt_util.h

…

mgmt.c

Bluetooth: Allow Microsoft extension to indicate curve validation

2021-04-08 12:26:34 +02:00

msft.c

Bluetooth: Allow Microsoft extension to indicate curve validation

2021-04-08 12:26:34 +02:00

msft.h

Bluetooth: Allow Microsoft extension to indicate curve validation

2021-04-08 12:26:34 +02:00

sco.c

Bluetooth: Remove trailing semicolon in macros

2021-03-24 08:56:24 +01:00

selftest.c

crypto: ecdh - move curve_id of ECDH from the key to algorithm name

2021-03-13 00:04:03 +11:00

selftest.h

…

smp.c

Merge tag 'net-next-5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2021-04-29 11:57:23 -07:00

smp.h

Bluetooth: Move force_bredr_smp debugfs into hci_debugfs_create_bredr

2020-11-09 13:52:55 +01:00