linux/include/net/bluetooth
David Herrmann b3916db32c Bluetooth: hidp: verify l2cap sockets
We need to verify that the given sockets actually are l2cap sockets. If
they aren't, we are not supposed to access bt_sk(sock) and we shouldn't
start the session if the offsets turn out to be valid local BT addresses.

That is, if someone passes a TCP socket to HIDCONNADD, then we access some
random offset in the TCP socket (which isn't even guaranteed to be valid).

Fix this by checking that the socket is an l2cap socket.

Signed-off-by: David Herrmann <dh.herrmann@gmail.com>
Acked-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Gustavo Padovan <gustavo.padovan@collabora.co.uk>
2013-04-05 23:44:14 -03:00
..
a2mp.h Bluetooth: AMP: Use set_bit / test_bit for amp_mgr state 2013-01-09 17:05:05 -02:00
amp.h Bluetooth: AMP: Use l2cap_physical_cfm in phylink complete evt 2012-11-01 20:27:10 -02:00
bluetooth.h Bluetooth: Add support for custom event terminated commands 2013-04-04 19:16:08 +03:00
hci_core.h Bluetooth: Remove driver init queue from core 2013-04-04 19:28:25 +03:00
hci_mon.h Bluetooth: Fix coding style in all .h files 2012-03-07 00:04:25 -03:00
hci.h Bluetooth: Add reading of page scan parameters 2013-03-18 15:35:02 -03:00
l2cap.h Bluetooth: hidp: verify l2cap sockets 2013-04-05 23:44:14 -03:00
mgmt.h Bluetooth: mgmt: Implement support for passkey notification 2012-09-18 22:27:29 -03:00
rfcomm.h Bluetooth: Remove RFCOMM session refcnt 2013-03-08 10:40:24 -03:00
sco.h
smp.h Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless 2012-09-07 15:07:55 -04:00