diff options
| author | Sai Teja Aluvala <aluvala.sai.teja@intel.com> | 2026-09-22 18:33:11 +0530 |
|---|---|---|
| committer | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2026-09-23 09:32:38 -0400 |
| commit | c9c15d4d8956df8c564f7c210e4dc5b9b820d97a (patch) | |
| tree | bd5ed61204d72ad7e07d0b26413170a854641a9f /tools/perf/scripts/python/bin/stackcollapse-report | |
| parent | d1ac915fb4184faad1b62148be50f317de7c24b5 (diff) | |
Bluetooth: btintel: validate DDC record lengths
Parse DDC record lengths in unsigned storage so 0xFF does not wrap.
Reject records smaller than the mandatory three-byte header, records
exceeding U8_MAX, and records exceeding remaining firmware bytes before
issuing Intel_Write_DDC.
This issue was reported by Claude Mythos.
Fixes: 145f2368c5fd ("Bluetooth: btintel: Add Device Configuration support")
Signed-off-by: Sai Teja Aluvala <aluvala.sai.teja@intel.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Diffstat (limited to 'tools/perf/scripts/python/bin/stackcollapse-report')
0 files changed, 0 insertions, 0 deletions