git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: dfc909b) | patch
Bluetooth: Prevents buffer overflow on l2cap_ertm_reassembly_sdu()
authorGustavo F. Padovan <padovan@profusion.mobi>
Sat, 1 May 2010 19:15:45 +0000 (16:15 -0300)
committerMarcel Holtmann <marcel@holtmann.org>
Mon, 10 May 2010 07:28:53 +0000 (09:28 +0200)
commit4178ba462a3e8ab5094e69606f01d9e95f2d5ea6
tree55370bd13670fc2166c88777ee2edec90005a8bctree | snapshot
parentdfc909befbfe967bd7f46ef33b6969c1b7f3cf42commit | diff
Bluetooth: Prevents buffer overflow on l2cap_ertm_reassembly_sdu()

The checks should be done before the the memcpy to avoid buffer
overflow.

Reported-by: João Paulo Rechi Vita <jprvita@profusion.mobi>
Signed-off-by: Gustavo F. Padovan <padovan@profusion.mobi>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
net/bluetooth/l2cap.c diff | blob | history
Full containers within linux kernel