Sebastian Andrzej Siewior cb51b388f8

Bluetooth: avoid recursive locking in hci_send_to_channel() ...

Mart reported a deadlock in -RT in the call path:
  hci_send_monitor_ctrl_event() -> hci_send_to_channel()

because both functions acquire the same read lock hci_sk_list.lock. This
is also a mainline issue because the qrwlock implementation is writer
fair (the traditional rwlock implementation is reader biased).

To avoid the deadlock there is now __hci_send_to_channel() which expects
the readlock to be held.

Cc: Marcel Holtmann <marcel@holtmann.org>
Cc: Johan Hedberg <johan.hedberg@intel.com>
Cc: stable-rt@vger.kernel.org
Fixes: 38ceaa00d02d ("Bluetooth: Add support for sending MGMT commands and events to monitor")
Reported-by: Mart van de Wege <mvdwege@gmail.com>
Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
Signed-off-by: azrim <mirzaspc@gmail.com>

2022-06-30 14:12:22 +00:00

..

bnep

Bluetooth: bnep: fix possible might sleep error in bnep_session

2017-06-27 19:32:11 +02:00

cmtp

Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails

2022-01-27 09:00:48 +01:00

hidp

Bluetooth: hidp: use correct wait queue when removing ctrl_wait

2021-08-26 08:37:08 -04:00

rfcomm

Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl

2020-04-13 10:34:35 +02:00

6lowpan.c

Bluetooth: add a mutex lock to avoid UAF in do_enale_set

2020-08-21 09:48:04 +02:00

a2mp.c

Bluetooth: drop HCI device reference before return

2021-03-03 18:22:38 +01:00

a2mp.h

…

af_bluetooth.c

net: use skb_queue_empty_lockless() in poll() handlers

2019-11-10 11:25:34 +01:00

amp.c

Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data

2021-03-07 11:27:44 +01:00

amp.h

…

ecdh_helper.c

Bluetooth: Delete error messages for failed memory allocations in two functions

2017-05-22 10:23:41 +02:00

ecdh_helper.h

Bluetooth: convert smp and selftest to crypto kpp API

2017-04-25 04:53:42 +02:00

hci_conn.c

Bluetooth: Disconnect if E0 is used for Level 4

2020-10-17 10:29:54 +02:00

hci_core.c

Bluetooth: Fix the creation of hdev->name

2022-05-15 19:40:26 +02:00

hci_debugfs.c

…

hci_debugfs.h

…

hci_event.c

Bluetooth: Fix use after free in hci_send_acl

2022-04-20 09:08:28 +02:00

hci_request.c

bluetooth: eliminate the potential race condition when removing the HCI controller

2021-05-22 10:57:24 +02:00

hci_request.h

Bluetooth: Fix append max 11 bytes of name to scan rsp data

2016-10-19 18:42:37 +02:00

hci_sock.c

Bluetooth: avoid recursive locking in hci_send_to_channel()

2022-06-30 14:12:22 +00:00

hci_sysfs.c

Bluetooth: defer cleanup of resources in hci_unregister_dev()

2021-08-15 13:03:30 +02:00

Kconfig

Revert "Bluetooth: Add option for disabling legacy ioctl interfaces"

2017-09-28 13:20:32 -07:00

l2cap_core.c

Bluetooth: initialize skb_queue_head at l2cap_chan_create()

2021-05-22 10:57:36 +02:00

l2cap_sock.c

Bluetooth: fix use-after-free error in lock_sock_nested()

2021-11-26 11:40:26 +01:00

leds.c

Bluetooth: Add combined LED trigger for controller power

2016-09-19 20:19:34 +02:00

leds.h

Bluetooth: Add combined LED trigger for controller power

2016-09-19 20:19:34 +02:00

lib.c

Bluetooth: make baswap src const

2017-09-01 22:49:47 +02:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

mgmt_util.c

networking: make skb_push & __skb_push return void pointers

2017-06-16 11:48:40 -04:00

mgmt_util.h

…

mgmt.c

Bluetooth: Fix the HCI to MGMT status conversion table

2021-07-20 16:17:45 +02:00

sco.c

Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout

2022-06-14 16:53:49 +02:00

selftest.c

Bluetooth: kfree tmp rather than an alias to it

2017-08-11 21:19:46 +02:00

selftest.h

…

smp.c

Bluetooth: SMP: Fail if remote and local public keys are identical

2021-05-26 11:47:01 +02:00

smp.h

Bluetooth: SMP: fix crash in unpairing

2018-11-04 14:52:39 +01:00