Re: [PATCH v3] Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs

From: patchwork-bot+bluetooth
Date: Wed Oct 30 2024 - 14:30:34 EST


Hello:

This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>:

On Tue, 29 Oct 2024 19:44:41 +0000 you wrote:
> Fix __hci_cmd_sync_sk() to return not NULL for unknown opcodes.
>
> __hci_cmd_sync_sk() returns NULL if a command returns a status event.
> However, it also returns NULL where an opcode doesn't exist in the
> hci_cc table because hci_cmd_complete_evt() assumes status = skb->data[0]
> for unknown opcodes.
> This leads to null-ptr-deref in cmd_sync for HCI_OP_READ_LOCAL_CODECS as
> there is no hci_cc for HCI_OP_READ_LOCAL_CODECS, which always assumes
> status = skb->data[0].
>
> [...]

Here is the summary with links:
- [v3] Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
https://git.kernel.org/bluetooth/bluetooth-next/c/af524ed29eee

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html