Bluetooth: refactor malicious adv data check
authorBrian Gix <brian.gix@intel.com>
Wed, 24 Nov 2021 20:16:28 +0000 (12:16 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 3 Feb 2022 08:27:52 +0000 (09:27 +0100)
commit305e92f525450f3e1b5f5c9dc7eadb152d66a082
tree42d07e08cb7e1ca53d2613f3c8eeff349630b4f4
parent91c42640f014d0a7d06293898822815c3b5aa0d8
Bluetooth: refactor malicious adv data check

commit 899663be5e75dc0174dc8bda0b5e6826edf0b29a upstream.

Check for out-of-bound read was being performed at the end of while
num_reports loop, and would fill journal with false positives. Added
check to beginning of loop processing so that it doesn't get checked
after ptr has been advanced.

Signed-off-by: Brian Gix <brian.gix@intel.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Cc: syphyr <syphyr@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/bluetooth/hci_event.c