projects / linux-2.6-block.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 631c868) | patch
Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling
authorEn-Wei Wu <en-wei.wu@canonical.com>
Thu, 8 May 2025 14:15:20 +0000 (22:15 +0800)
committerLuiz Augusto von Dentz <luiz.von.dentz@intel.com>
Thu, 22 May 2025 17:05:39 +0000 (13:05 -0400)
commitc27046c98bd26d4270c076e7d851d68aaaf964a3
treed0e250b719baf4204639d653a72643efc5317178tree
parent631c8682c3b8ce2678b2d849b3f28e5568853591commit | diff
Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling

Use skb_pull() and skb_pull_data() to safely parse QCA dump packets.

This avoids direct pointer math on skb->data, which could lead to
invalid access if the packet is shorter than expected.

Fixes: 20981ce2d5a5 ("Bluetooth: btusb: Add WCN6855 devcoredump support")
Signed-off-by: En-Wei Wu <en-wei.wu@canonical.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
drivers/bluetooth/btusb.c diff | blob | blame | history
Linux 6.x block layer and io_uring tree(s)