diff options
| author | Ben Seri <ben@armis.com> | 2017-09-13 14:04:32 +0530 |
|---|---|---|
| committer | Winnie Hsu <whsu@nvidia.com> | 2017-10-03 07:10:26 -0700 |
| commit | b271e8fa67a6d9c4600274a25636cfe00fdd1b68 (patch) | |
| tree | f9c4d5ed68a5746f9f783e742c6473483dfefa24 /drivers/dma/sirf-dma.c | |
| parent | 2db040946ff8340485b2b33fe5a46f3166fa96f6 (diff) | |
Bluetooth: Properly check L2CAP config option output buffer lengthtegra-l4t-r21.6
Validate the output buffer length for L2CAP config requests and responses
to avoid overflowing the stack buffer used for building the option blocks.
Bug 1989825
Change-Id: Id158ece2176c4ac339a7232dfde8c47ce2241122
Cc: stable@vger.kernel.org
Signed-off-by: Ben Seri <ben@armis.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Bibek Basu <bbasu@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/1558952
(cherry picked from commit c005032a3ffe77437f6ebc704af377fc9bc46279)
Reviewed-on: https://git-master.nvidia.com/r/1570529
Reviewed-by: Matthew Pedro <mapedro@nvidia.com>
Reviewed-by: Winnie Hsu <whsu@nvidia.com>
Tested-by: Winnie Hsu <whsu@nvidia.com>
Diffstat (limited to 'drivers/dma/sirf-dma.c')
0 files changed, 0 insertions, 0 deletions