linux-stable.git/net/bluetooth, branch linux-2.6.20.y

[PATCH] Revert "Keep rfcomm_dev on the list until it is freed"

2007-08-28T10:14:54+00:00

Randy Dunlap and Boris B. Zhmurov reported build failure of
rfcomm/tty.c since 2.6.20.17. Marcel Holtmann confirmed that
the following patch was inappropriate for this kernel. Remove
it.

This reverts commit 8c25e9c9cd1fed0d5f57075b584c39a4b9af9830.

Cc: Marcel Holtmann 
Signed-off-by: Willy Tarreau

[PATCH] Keep rfcomm_dev on the list until it is freed

2007-08-25T15:24:16+00:00

This patch changes the RFCOMM TTY release process so that the TTY is kept
on the list until it is really freed. A new device flag is used to keep
track of released TTYs.

Signed-off-by: Ville Tervo 
Signed-off-by: Marcel Holtmann 
Signed-off-by: Greg Kroah-Hartman 
Signed-off-by: Willy Tarreau

[PATCH] Hangup TTY before releasing rfcomm_dev

2007-08-25T15:24:16+00:00

The core problem is that RFCOMM socket layer ioctl can release
rfcomm_dev struct while RFCOMM TTY layer is still actively using
it. Calling tty_vhangup() is needed for a synchronous hangup before
rfcomm_dev is freed.

Addresses the oops at http://bugzilla.kernel.org/show_bug.cgi?id=7509

Acked-by: Alan Cox 
Signed-off-by: Marcel Holtmann 
Signed-off-by: Greg Kroah-Hartman 
Signed-off-by: Willy Tarreau

[Bluetooth] Restrict well known PSM to privileged users

2007-01-22T21:00:45+00:00

The PSM values below 0x1001 of L2CAP are reserved for well known
services. Restrict the possibility to bind them to privileged
users.

Signed-off-by: Marcel Holtmann

[Bluetooth] Missing endian swapping for L2CAP socket list

2007-01-22T21:00:40+00:00

The PSM value in the L2CAP socket list must be converted to host
order before printing it.

Signed-off-by: Marcel Holtmann

[Bluetooth] Handle device registration failures

2007-01-09T08:29:56+00:00

In the case the device registration for a new Bluetooth low-level
connection fails there is no need to unregister it when the temporary
data structure has been removed.

Signed-off-by: Marcel Holtmann

[Bluetooth] Fix uninitialized return value for RFCOMM sendmsg()

2007-01-09T08:29:55+00:00

When calling send() with a zero length parameter on a RFCOMM socket
it returns a positive value. In this rare case the variable err is
used uninitialized and unfortunately its value is returned.

Signed-off-by: Marcel Holtmann

[Bluetooth] More checks if DLC is still attached to the TTY

2007-01-09T08:29:54+00:00

If the DLC device is no longer attached to the TTY device, then return
errors or default values for various callbacks of the TTY layer.

Signed-off-by: Marcel Holtmann

[Bluetooth] Add packet size checks for CAPI messages

2007-01-09T08:29:53+00:00

With malformed packets it might be possible to overwrite internal
CMTP and CAPI data structures. This patch adds additional length
checks to prevent these kinds of remote attacks.

Signed-off-by: Marcel Holtmann

[PATCH] hci endianness annotations

2006-12-13T17:05:52+00:00

Signed-off-by: Al Viro 
Acked-by: Marcel Holtmann 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds