diff options
| author | Haoxiang Li <haoxiang_li2024@163.com> | 2025-02-21 16:49:47 +0800 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2025-03-13 12:58:26 +0100 |
| commit | c5845c73cbacf5704169283ef29ca02031a36564 (patch) | |
| tree | e047fdf687ceba14c1d771d57f3ed8c61f45fb1b | |
| parent | f3fcdb2de9fdbed9d8c6a8eb2c5fbd7d6f54a4d8 (diff) | |
| download | linux-c5845c73cbacf5704169283ef29ca02031a36564.tar.gz linux-c5845c73cbacf5704169283ef29ca02031a36564.tar.bz2 linux-c5845c73cbacf5704169283ef29ca02031a36564.zip | |
Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
commit f2176a07e7b19f73e05c805cf3d130a2999154cb upstream.
Add check for the return value of mgmt_alloc_skb() in
mgmt_remote_name() to prevent null pointer dereference.
Fixes: ba17bb62ce41 ("Bluetooth: Fix skb allocation in mgmt_remote_name() & mgmt_device_connected()")
Cc: stable@vger.kernel.org
Signed-off-by: Haoxiang Li <haoxiang_li2024@163.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| -rw-r--r-- | net/bluetooth/mgmt.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/net/bluetooth/mgmt.c b/net/bluetooth/mgmt.c index b36254107ef5..46ed7945cc2f 100644 --- a/net/bluetooth/mgmt.c +++ b/net/bluetooth/mgmt.c @@ -10443,6 +10443,8 @@ void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type, skb = mgmt_alloc_skb(hdev, MGMT_EV_DEVICE_FOUND, sizeof(*ev) + (name ? eir_precalc_len(name_len) : 0)); + if (!skb) + return; ev = skb_put(skb, sizeof(*ev)); bacpy(&ev->addr.bdaddr, bdaddr); |