Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bluetooth: classic: avdtp: missing buffer length check #78608

Closed
lylezhu2012 opened this issue Sep 18, 2024 · 2 comments
Closed

Bluetooth: classic: avdtp: missing buffer length check #78608

lylezhu2012 opened this issue Sep 18, 2024 · 2 comments
Assignees
Labels
area: Bluetooth Classic Bluetooth Classic (BR/EDR) area: Bluetooth Backport Backport PR and backport failure issues bug The issue is a bug, or the PR is fixing a bug priority: low Low impact/importance bug Stale
Milestone

Comments

@lylezhu2012
Copy link
Contributor

Describe the bug
Missing buffer length check before pulling the data from net buffer in function bt_avdtp_l2cap_recv.

To Reproduce
N/A

Expected behavior
Check the remaining buffer length before pulling the data from the net buffer.

Impact
May cause system crash.

Logs and console output
N/A

Environment (please complete the following information):
N/A

Additional context

@lylezhu2012 lylezhu2012 added the bug The issue is a bug, or the PR is fixing a bug label Sep 18, 2024
@lylezhu2012 lylezhu2012 self-assigned this Sep 18, 2024
@henrikbrixandersen henrikbrixandersen added area: Bluetooth Backport Backport PR and backport failure issues area: Bluetooth Classic Bluetooth Classic (BR/EDR) labels Sep 18, 2024
@henrikbrixandersen henrikbrixandersen added this to the v3.7.1 milestone Sep 23, 2024
@dkalowsk dkalowsk added the priority: low Low impact/importance bug label Sep 24, 2024
Copy link

This issue has been marked as stale because it has been open (more than) 60 days with no activity. Remove the stale label or add a comment saying that you would like to have the label removed otherwise this issue will automatically be closed in 14 days. Note, that you can always re-open a closed issue at any time.

@github-actions github-actions bot added the Stale label Nov 24, 2024
@lylezhu2012
Copy link
Contributor Author

The PR for the issue has been merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area: Bluetooth Classic Bluetooth Classic (BR/EDR) area: Bluetooth Backport Backport PR and backport failure issues bug The issue is a bug, or the PR is fixing a bug priority: low Low impact/importance bug Stale
Projects
None yet
Development

No branches or pull requests

3 participants