Young Xiao a1616a5ac9 Bluetooth: hidp: fix buffer overflow ... Struct ca is copied from userspace. It is not checked whether the "name" field is NULL terminated, which allows local users to obtain potentially sensitive information from kernel stack memory, via a HIDPCONNADD command. This vulnerability is similar to CVE-2011-1079. Signed-off-by: Young Xiao <YangX92@hotmail.com> Signed-off-by: Marcel Holtmann <marcel@holtmann.org> Cc: stable@vger.kernel.org		2019-04-23 19:04:38 +02:00
..
core.c	Merge branch 'work.compat' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2018-10-25 12:48:22 -07:00
hidp.h	hidp: constify hidp_connection_add()	2018-09-10 12:41:07 -04:00
Kconfig	Bluetooth: Introduce BT_BREDR and BT_LE config options	2014-11-02 10:01:53 +02:00
Makefile
sock.c	Bluetooth: hidp: fix buffer overflow	2019-04-23 19:04:38 +02:00