Kernel/linux-stable
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2025-01-09 14:43:16 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
linux-stable/net
History
Siddh Raman Pant b4066eb04b Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link 
hci_connect_sco currently returns NULL when there is no link (i.e. when
hci_conn_link() returns NULL).

sco_connect() expects an ERR_PTR in case of any error (see line 266 in
sco.c). Thus, hcon set as NULL passes through to sco_conn_add(), which
tries to get hcon->hdev, resulting in dereferencing a NULL pointer as
reported by syzkaller.

The same issue exists for iso_connect_cis() calling hci_connect_cis().

Thus, make hci_connect_sco() and hci_connect_cis() return ERR_PTR
instead of NULL.

Reported-and-tested-by: syzbot+37acd5d80d00d609d233@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=37acd5d80d00d609d233
Fixes: 06149746e720 ("Bluetooth: hci_conn: Add support for linking multiple hcon")
Signed-off-by: Siddh Raman Pant <code@siddh.me>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
2023-07-20 11:26:56 -07:00
..
6lowpan
6lowpan: Remove redundant initialisation.
2023-03-29 08:22:52 +01:00
9p
Including fixes from netfilter.
2023-05-05 19:12:01 -07:00
802
treewide: Convert del_timer*() to timer_shutdown*()
2022-12-25 13:38:09 -08:00
8021q
vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
2023-05-17 12:55:39 +01:00
appletalk
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
atm
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
ax25
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
batman-adv
batman-adv: Broken sync while rescheduling delayed work
2023-05-26 23:14:49 +02:00
bluetooth
Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link
2023-07-20 11:26:56 -07:00
bpf
bpf: Move kernel test kfuncs to bpf_testmod
2023-05-16 22:09:24 -07:00
bpfilter
net: Use umd_cleanup_helper()
2023-05-31 13:06:57 +02:00
bridge
Revert "bridge: Add extack warning when enabling STP in netns."
2023-07-20 10:46:28 +02:00
caif
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
can
can: bcm: Fix UAF in bcm_proc_show()
2023-07-17 09:46:26 +02:00
ceph
libceph: Partially revert changes to support MSG_SPLICE_PAGES
2023-06-27 09:32:40 -07:00
core
for-netdev
2023-07-12 18:13:57 -07:00
dcb
net: dcb: add helper functions to retrieve PCP and DSCP rewrite maps
2023-01-20 09:33:22 +00:00
dccp
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
devlink
devlink: report devlink_port_type_warn source device
2023-06-17 00:31:14 -07:00
dns_resolver
cred: Do not default to init_cred in prepare_kernel_cred()
2022-11-01 10:04:52 -07:00
dsa
net: dsa: sja1105: always enable the send_meta options
2023-07-04 19:42:27 +01:00
ethernet
net: ethernet: use sysfs_emit() to instead of scnprintf()
2022-12-07 20:02:44 -08:00
ethtool
net: create device lookup API with reference tracking
2023-06-15 08:21:11 +01:00
handshake
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2023-06-15 22:19:41 -07:00
hsr
net: hsr: Disable promiscuous mode in offload mode
2023-06-21 16:47:05 -07:00
ieee802154
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
ife
…
ipv4
Revert "tcp: avoid the lookup process failing to get sk in ehash table"
2023-07-19 20:57:40 -07:00
ipv6
net:ipv6: check return value of pskb_trim()
2023-07-19 12:25:58 +01:00
iucv
net/iucv: Fix size of interrupt data
2023-03-16 17:34:40 -07:00
kcm
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
key
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
l2tp
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
l3mdev
l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu
2022-04-15 14:27:24 -07:00
lapb
…
llc
llc: Don't drop packet from non-root netns.
2023-07-20 10:46:28 +02:00
mac80211
- New Drivers
2023-07-03 11:26:05 -07:00
mac802154
Core WPAN changes:
2023-06-24 15:41:46 -07:00
mctp
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
mpls
net: move gso declarations and functions to their own files
2023-06-10 00:11:41 -07:00
mptcp
mptcp: do not rely on implicit state check in mptcp_listen()
2023-07-05 10:51:14 +01:00
ncsi
net/ncsi: change from ndo_set_mac_address to dev_set_mac_address
2023-06-09 10:32:51 +01:00
netfilter
netfilter pull request 23-07-06
2023-07-06 11:02:58 +02:00
netlabel
netlabel: Reorder fields in 'struct netlbl_domaddr6_map'
2023-06-20 20:06:56 -07:00
netlink
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2023-06-27 09:45:22 -07:00
netrom
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
nfc
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2023-06-27 09:45:22 -07:00
nsh
net: move gso declarations and functions to their own files
2023-06-10 00:11:41 -07:00
openvswitch
net: openvswitch: add support for l4 symmetric hashing
2023-06-12 09:46:30 +01:00
packet
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
phonet
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
psample
genetlink: start to validate reserved header bytes
2022-08-29 12:47:15 +01:00
qrtr
Networking changes for 6.5.
2023-06-28 16:43:10 -07:00
rds
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
rfkill
net: rfkill-gpio: Add explicit include for of.h
2023-04-06 20:36:27 +02:00
rose
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
rxrpc
Networking changes for 6.5.
2023-06-28 16:43:10 -07:00
sched
net: sched: cls_flower: Undo tcf_bind_filter in case of an error
2023-07-17 07:33:39 +01:00
sctp
sctp: fix potential deadlock on &net->sctp.addr_wq_lock
2023-06-29 11:49:42 +02:00
smc
smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
2023-06-24 15:50:12 -07:00
strparser
strparser: pad sk_skb_cb to avoid straddling cachelines
2022-07-08 18:38:44 -07:00
sunrpc
NFS client updates for Linux 6.5
2023-07-01 14:38:25 -07:00
switchdev
net: rename reference+tracking helpers
2022-06-09 21:52:55 -07:00
tipc
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
tls
net: Kill MSG_SENDPAGE_NOTLAST
2023-06-24 15:50:13 -07:00
unix
net: scm: introduce and use scm_recv_unix helper
2023-06-27 10:50:22 -07:00
vmw_vsock
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
wireless
wifi: cfg80211: fix receiving mesh packets without RFC1042 header
2023-07-12 18:03:40 -07:00
x25
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
xdp
xsk: Honor SO_BINDTODEVICE on bind
2023-07-04 10:19:48 +02:00
xfrm
tcp_bpf, smc, tls, espintcp, siw: Reduce MSG_SENDPAGE_NOTLAST usage
2023-06-24 15:50:12 -07:00
compat.c
net/compat: Update msg_control_is_user when setting a kernel pointer
2023-04-14 11:09:27 +01:00
devres.c
…
Kconfig
net/core: Enable socket busy polling on -RT
2023-05-26 08:51:26 +01:00
Kconfig.debug
net: make NET_(DEV|NS)_REFCNT_TRACKER depend on NET
2022-09-20 14:23:56 -07:00
Makefile
net/handshake: Create a NETLINK service for handling handshake requests
2023-04-19 18:48:48 -07:00
socket.c
Networking changes for 6.5.
2023-06-28 16:43:10 -07:00
sysctl_net.c
…