Griffin Kroah-Hartman 11b4b0e63f Bluetooth: MGMT: Add error handling to pair_device() ...

commit 538fd3921a upstream.

hci_conn_params_add() never checks for a NULL value and could lead to a NULL
pointer dereference causing a crash.

Fixed by adding error handling in the function.

Cc: Stable <stable@kernel.org>
Fixes: 5157b8a503 ("Bluetooth: Fix initializing conn_params in scan phase")
Signed-off-by: Griffin Kroah-Hartman <griffin@kroah.com>
Reported-by: Yiwei Zhang <zhan4630@purdue.edu>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-09-04 13:13:06 +02:00

..

bnep

Bluetooth: bnep: Fix out-of-bound access

2024-09-04 13:13:03 +02:00

cmtp

…

hidp

…

rfcomm

Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security

2024-03-26 18:22:33 -04:00

6lowpan.c

Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()

2022-12-14 11:28:28 +01:00

a2mp.c

Bluetooth: drop HCI device reference before return

2021-03-04 09:39:34 +01:00

a2mp.h

…

af_bluetooth.c

…

amp.c

…

amp.h

…

ecdh_helper.c

…

ecdh_helper.h

…

hci_conn.c

Bluetooth: Fix bogus check for re-auth no supported with non-ssp

2024-01-25 14:33:34 -08:00

hci_core.c

Bluetooth: hci_core: Fix LE quote calculation

2024-09-04 13:13:05 +02:00

hci_debugfs.c

Bluetooth: Fix TOCTOU in HCI debugfs implementation

2024-04-13 12:50:12 +02:00

hci_debugfs.h

…

hci_event.c

Bluetooth: Fix incorrect pointer arithmatic in ext_adv_report_evt

2024-07-18 11:39:35 +02:00

hci_request.c

Bluetooth: Fix memory leak in hci_req_sync_complete()

2024-05-02 16:17:08 +02:00

hci_request.h

…

hci_sock.c

Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name

2023-10-25 11:17:03 +02:00

hci_sysfs.c

Bluetooth: Fix double free in hci_conn_cleanup

2023-11-28 16:46:31 +00:00

Kconfig

…

l2cap_core.c

Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()

2024-08-19 05:32:10 +02:00

l2cap_sock.c

Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()

2024-05-02 16:17:13 +02:00

leds.c

leds: triggers: let struct led_trigger::activate() return an error code

2018-07-05 23:21:10 +02:00

leds.h

…

lib.c

…

Makefile

…

mgmt_util.c

…

mgmt_util.h

…

mgmt.c

Bluetooth: MGMT: Add error handling to pair_device()

2024-09-04 13:13:06 +02:00

sco.c

Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout

2024-05-17 11:42:42 +02:00

selftest.c

…

selftest.h

…

smp.c

…

smp.h

…