diff options
| author | Li Qiang <liqiang01@kylinos.cn> | 2026-07-16 16:47:30 +0800 |
|---|---|---|
| committer | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2026-08-07 15:38:29 -0400 |
| commit | ceea75ad8925425ee6520ead964b55888fe871ec (patch) | |
| tree | 0828f118372df40f6af9ebcfaac9c3390c55b8a1 /tools/perf/scripts/python/bin/stackcollapse-report | |
| parent | 65be90af275675a65deed133ef67c81168e12bc9 (diff) | |
Bluetooth: hci_bcsp: validate received packet lengths
The BCSP transmit path reads an HCI command header when an extension
packet has only been tested for a nonzero length. Its LE configuration
packet handler also indexes bytes through offset seven without a length
check.
Validate the complete command and LE configuration packet headers
before accessing their fields.
Signed-off-by: Li Qiang <liqiang01@kylinos.cn>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Diffstat (limited to 'tools/perf/scripts/python/bin/stackcollapse-report')
0 files changed, 0 insertions, 0 deletions