MIRRORS/linux-yocto
1
0
Fork 0
mirror of git://git.yoctoproject.org/linux-yocto.git synced 2025-10-22 23:13:01 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity
1b98f357da
linux-yocto/drivers/bluetooth
History
Kees Cook 3aa1dc3c90 Bluetooth: btintel: Check dsbr size from EFI variable 
Since the size of struct btintel_dsbr is already known, we can just
start there instead of querying the EFI variable size. If the final
result doesn't match what we expect also fail. This fixes a stack buffer
overflow when the EFI variable is larger than struct btintel_dsbr.

Reported-by: zepta <z3ptaa@gmail.com>
Closes: https://lore.kernel.org/all/CAPBS6KoaWV9=dtjTESZiU6KK__OZX0KpDk-=JEH8jCHFLUYv3Q@mail.gmail.com
Fixes: eb9e749c01 ("Bluetooth: btintel: Allow configuring drive strength of BRI")
Signed-off-by: Kees Cook <kees@kernel.org>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
2025-05-22 13:06:28 -04:00
..
ath3k.c move asm/unaligned.h to linux/unaligned.h 2024-10-02 17:23:23 -04:00
bcm203x.c
bfusb.c Bluetooth: Fix code style warning 2025-03-25 12:31:27 -04:00
bluecard_cs.c treewide: Switch/rename to timer_delete[_sync]() 2025-04-05 10:30:12 +02:00
bpa10x.c
bt3c_cs.c
btbcm.c Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() 2025-01-15 10:34:27 -05:00
btbcm.h
btintel_pcie.c Bluetooth: btintel_pcie: Dump debug registers on error 2025-05-21 10:28:08 -04:00
btintel_pcie.h Bluetooth: btintel_pcie: Dump debug registers on error 2025-05-21 10:28:08 -04:00
btintel.c Bluetooth: btintel: Check dsbr size from EFI variable 2025-05-22 13:06:28 -04:00
btintel.h Bluetooth: btintel_pcie: Do not generate coredump for diagnostic events 2025-05-21 10:27:05 -04:00
btmrvl_debugfs.c
btmrvl_drv.h
btmrvl_main.c Bluetooth: Use str_enable_disable-like helpers 2025-01-15 10:36:11 -05:00
btmrvl_sdio.c Bluetooth: btmrvl_sdio: Fix wakeup source leaks on device unbind 2025-05-21 10:27:20 -04:00
btmrvl_sdio.h
btmtk.c Bluetooth: btmtk: Remove the resetting step before downloading the fw 2025-03-25 12:51:10 -04:00
btmtk.h Bluetooth: btmtk: remove #ifdef around declarations 2024-07-26 10:56:54 -04:00
btmtksdio.c Bluetooth: btmtksdio: Fix wakeup source leaks on device unbind 2025-05-21 10:27:36 -04:00
btmtkuart.c bluetooth: Fix typos in the comments 2024-11-14 15:28:07 -05:00
btnxpuart.c Bluetooth: btnxpuart: Implement host-wakeup feature 2025-05-21 10:28:07 -04:00
btqca.c Bluetooth: qca: fix NV variant for one of WCN3950 SoCs 2025-04-10 13:09:20 -04:00
btqca.h Bluetooth: qca: add WCN3950 support 2025-03-25 12:42:35 -04:00
btqcomsmd.c Get rid of 'remove_new' relic from platform driver struct 2024-12-01 15:12:43 -08:00
btrsi.c move asm/unaligned.h to linux/unaligned.h 2024-10-02 17:23:23 -04:00
btrtl.c Bluetooth: btrtl: Prevent potential NULL dereference 2025-04-10 13:09:16 -04:00
btrtl.h Bluetooth: btrtl: Add Realtek devcoredump support 2023-08-11 11:35:14 -07:00
btsdio.c Bluetooth: btsdio: Do not bind to non-removable CYW4373 2024-09-12 12:24:08 -04:00
btusb.c Bluetooth: btusb: Add new VID/PID 13d3/3584 for MT7922 2025-05-22 13:05:55 -04:00
dtl1_cs.c
h4_recv.h move asm/unaligned.h to linux/unaligned.h 2024-10-02 17:23:23 -04:00
hci_ag6xx.c
hci_aml.c Bluetooth: hci_uart: Remove unnecessary NULL check before release_firmware() 2025-05-21 10:27:51 -04:00
hci_ath.c
hci_bcm.c Get rid of 'remove_new' relic from platform driver struct 2024-12-01 15:12:43 -08:00
hci_bcm4377.c move asm/unaligned.h to linux/unaligned.h 2024-10-02 17:23:23 -04:00
hci_bcsp.c treewide: Switch/rename to timer_delete[_sync]() 2025-04-05 10:30:12 +02:00
hci_h4.c move asm/unaligned.h to linux/unaligned.h 2024-10-02 17:23:23 -04:00
hci_h5.c treewide: Switch/rename to timer_delete[_sync]() 2025-04-05 10:30:12 +02:00
hci_intel.c Get rid of 'remove_new' relic from platform driver struct 2024-12-01 15:12:43 -08:00
hci_ldisc.c Bluetooth: hci_uart: Fix another race during initialization 2025-03-25 12:32:15 -04:00
hci_ll.c bluetooth: Fix typos in the comments 2024-11-14 15:28:07 -05:00
hci_mrvl.c Bluetooth: hci_mrvl: Add serdev support for 88W8997 2023-04-23 21:45:29 -07:00
hci_nokia.c bluetooth: Fix typos in the comments 2024-11-14 15:28:07 -05:00
hci_qca.c treewide: Switch/rename to timer_delete[_sync]() 2025-04-05 10:30:12 +02:00
hci_serdev.c Bluetooth: HCI: Remove HCI_AMP support 2024-05-14 10:54:49 -04:00
hci_uart.h Bluetooth: hci_uart: Fix another race during initialization 2025-03-25 12:32:15 -04:00
hci_vhci.c Bluetooth: vhci: Avoid needless snprintf() calls 2025-04-16 16:50:47 -04:00
Kconfig Revert "Bluetooth: btusb: Configure altsetting for HCI_USER_CHANNEL" 2025-05-21 10:28:08 -04:00
Makefile Bluetooth: hci_uart: Add support for Amlogic HCI UART 2024-09-10 12:44:10 -04:00
virtio_bt.c virtio: rename virtio_find_vqs_info() to virtio_find_vqs() 2024-07-17 05:20:58 -04:00