Marcel Holtmann 044a3e96c4 Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106) ...

With malformed packets it might be possible to overwrite internal
CMTP and CAPI data structures. This patch adds additional length
checks to prevent these kinds of remote attacks.

Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Adrian Bunk <bunk@stusta.de>

2007-01-09 03:23:30 +01:00

..

bnep

[PATCH] capable/capability.h (net/)

2006-01-11 18:42:14 -08:00

cmtp

Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106)

2007-01-09 03:23:30 +01:00

hidp

[PATCH] capable/capability.h (net/)

2006-01-11 18:42:14 -08:00

rfcomm

[Bluetooth] Reduce L2CAP MTU for RFCOMM connections

2006-02-13 11:39:57 +01:00

af_bluetooth.c

…

hci_conn.c

[NET]: Remove unneeded kmalloc() return value casts

2006-01-10 13:08:21 -08:00

hci_core.c

…

hci_event.c

…

hci_sock.c

[Bluetooth] Fix NULL pointer dereferences of the HCI socket

2006-02-13 11:40:03 +01:00

hci_sysfs.c

…

Kconfig

…

l2cap.c

[PATCH] capable/capability.h (net/)

2006-01-11 18:42:14 -08:00

lib.c

…

Makefile

…

sco.c

…