mbox series

[BlueZ,v2,0/1] Fix null pointer dereference in util_ltv_foreach

Message ID 20240621075517.22576-1-sarveshwar.bajaj@nxp.com
Headers show
Series Fix null pointer dereference in util_ltv_foreach | expand

Message

Sarveshwar Bajaj June 21, 2024, 7:55 a.m. UTC 
In the existing code, iov structure is initialized with iov.iov_base = (void *)
data. If data is NULL,casting (void *) NULL to iov_base results in a null
pointer dereference.Inside the loop of util_ltv_foreach,
util_iov_pull_u8(&iov, &l) is called to pull uint8_t values from iov.
If iov.iov_base (derived from data) is NULL,attempting to dereference it in
util_iov_pull_u8 will cause a segmentation fault.

Added NULL pointer check for data so it will presvent null pointer dereference


Sarveshwar Bajaj (1):
  shared/util: Fix null pointer dereference in util_ltv_foreach()

 src/shared/util.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comments

patchwork-bot+bluetooth@kernel.org June 25, 2024, 2:10 p.m. UTC | #1 
Hello:

This patch was applied to bluetooth/bluez.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:

On Fri, 21 Jun 2024 13:25:16 +0530 you wrote:
> In the existing code, iov structure is initialized with iov.iov_base = (void *)
> data. If data is NULL,casting (void *) NULL to iov_base results in a null
> pointer dereference.Inside the loop of util_ltv_foreach,
> util_iov_pull_u8(&iov, &l) is called to pull uint8_t values from iov.
> If iov.iov_base (derived from data) is NULL,attempting to dereference it in
> util_iov_pull_u8 will cause a segmentation fault.
> 
> [...]

Here is the summary with links:
  - [BlueZ,v2,1/1] shared/util: Fix null pointer dereference in util_ltv_foreach()
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=e453627223db

You are awesome, thank you!