Luiz Augusto von Dentz 4eb6b4890e Bluetooth: bnep: Fix out-of-bound access ...

[ Upstream commit 0f0639b4d6f649338ce29c62da3ec0787fa08cd1 ]

This fixes attempting to access past ethhdr.h_source, although it seems
intentional to copy also the contents of h_proto this triggers
out-of-bound access problems with the likes of static analyzer, so this
instead just copy ETH_ALEN and then proceed to use put_unaligned to copy
h_proto separetely.

Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit 01ed379cb5ddc0049a348786b971fe53a31e6255)
Signed-off-by: Vegard Nossum <vegard.nossum@oracle.com>

2024-10-24 10:07:38 +00:00

..

bnep.h

…

core.c

Bluetooth: bnep: Fix out-of-bound access

2024-10-24 10:07:38 +00:00

Kconfig

…

Makefile

…

netdev.c

…

sock.c

…