| commit | e860d2c904d1a9f38a24eb44c9f34b8f915a6ea3 | [log] [tgz] |
|---|---|---|
| author | Ben Seri <ben@armis.com> | Sat Sep 09 23:15:59 2017 +0200 |
| committer | Linus Torvalds <torvalds@linux-foundation.org> | Sat Sep 09 17:56:05 2017 -0700 |
| tree | ec7c665df89fb1e72b735a7ac326d2ded6eeaaa2 | |
| parent | 4dfc2788033d30dfccfd4268e06dd73ce2c654ed [diff] |
Bluetooth: Properly check L2CAP config option output buffer length Validate the output buffer length for L2CAP config requests and responses to avoid overflowing the stack buffer used for building the option blocks. Cc: stable@vger.kernel.org Signed-off-by: Ben Seri <ben@armis.com> Signed-off-by: Marcel Holtmann <marcel@holtmann.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>