| Message ID | 20250221084947.2756859-1-haoxiang_li2024@163.com |
|---|---|
| State | Accepted |
| Commit | 62ee156d6b292330d78a3c67b3e017d95c967e16 |
| Headers | show |
| Series | [v2] Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() | expand |
Hello: This patch was applied to bluetooth/bluetooth-next.git (master) by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>: On Fri, 21 Feb 2025 16:49:47 +0800 you wrote: > Add check for the return value of mgmt_alloc_skb() in > mgmt_remote_name() to prevent null pointer dereference. > > Fixes: ba17bb62ce41 ("Bluetooth: Fix skb allocation in mgmt_remote_name() & mgmt_device_connected()") > Cc: stable@vger.kernel.org > Signed-off-by: Haoxiang Li <haoxiang_li2024@163.com> > > [...] Here is the summary with links: - [v2] Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() https://git.kernel.org/bluetooth/bluetooth-next/c/62ee156d6b29 You are awesome, thank you!
diff --git a/net/bluetooth/mgmt.c b/net/bluetooth/mgmt.c index f53304cb09db..3e0f88cd975c 100644 --- a/net/bluetooth/mgmt.c +++ b/net/bluetooth/mgmt.c @@ -10413,6 +10413,8 @@ void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type, skb = mgmt_alloc_skb(hdev, MGMT_EV_DEVICE_FOUND, sizeof(*ev) + (name ? eir_precalc_len(name_len) : 0)); + if (!skb) + return; ev = skb_put(skb, sizeof(*ev)); bacpy(&ev->addr.bdaddr, bdaddr);
Add check for the return value of mgmt_alloc_skb() in mgmt_remote_name() to prevent null pointer dereference. Fixes: ba17bb62ce41 ("Bluetooth: Fix skb allocation in mgmt_remote_name() & mgmt_device_connected()") Cc: stable@vger.kernel.org Signed-off-by: Haoxiang Li <haoxiang_li2024@163.com> --- Changes in v2: - modify the title description. --- net/bluetooth/mgmt.c | 2 ++ 1 file changed, 2 insertions(+)