Linux-Bluetooth Archive mirror
 help / color / mirror / Atom feed
* [bluez/bluez] bbf198: Fix crash in iov_append_ltv function
@ 2024-03-22 10:07 Luiz Augusto von Dentz
  0 siblings, 0 replies; only message in thread
From: Luiz Augusto von Dentz @ 2024-03-22 10:07 UTC (permalink / raw
  To: linux-bluetooth

  Branch: refs/heads/master
  Home:   https://github.com/bluez/bluez
  Commit: bbf198280e701580cf2284800d56811bae71b80a
      https://github.com/bluez/bluez/commit/bbf198280e701580cf2284800d56811bae71b80a
  Author: Silviu Florian Barbulescu <silviu.barbulescu@nxp.com>
  Date:   2024-03-22 (Fri, 22 Mar 2024)

  Changed paths:
    M client/player.c

  Log Message:
  -----------
  Fix crash in iov_append_ltv function

Fix function iov_append_ltv crashes because is not reallocating memory
Use util_ltv_push from util.c

[bluetooth]# [NEW] Endpoint /org/bluez/hci0/pac_bcast0
[bluetooth]# Endpoint /local/endpoint/ep0 registered
endpoint.config /org/bluez/hci0/pac_bcast0 /local/endpoint/ep0 48_4_1
[/local/endpoint/ep0] BIG (auto/value): 0
[/local/endpoint/ep0] Enter channel location (value/no): 3
=================================================================
==80806==ERROR: AddressSanitizer: heap-buffer-overflow on
 address 0x60200000a8ba at pc 0x561971611e0e bp 0x7ffd45ab1f00
 sp 0x7ffd45ab1ef0 WRITE of size 1 at 0x60200000a8ba thread T0
  0x561971611e0d in put_u8 src/shared/util.h:254
  0x561971611e0d in util_iov_push_u8 src/shared/util.c:534
  0x5619715c28f0 in iov_append_ltv client/player.c:3565
  0x5619715c28f0 in config_endpoint_channel_location client/player.c:3593
  0x5619716226ce in bt_shell_release_prompt src/shared/shell.c:744
  0x561971623087 in rl_handler src/shared/shell.c:769


  Commit: a2b2d2e4ab0ee375b24007e23f19e3122fa33764
      https://github.com/bluez/bluez/commit/a2b2d2e4ab0ee375b24007e23f19e3122fa33764
  Author: Silviu Florian Barbulescu <silviu.barbulescu@nxp.com>
  Date:   2024-03-22 (Fri, 22 Mar 2024)

  Changed paths:
    M client/player.c

  Log Message:
  -----------
  player: Adjust SDU size based on the number of locations

Adjust the SDU size based on the number of locations/channels
that is being requested.


  Commit: 97fa2525fb104856c80f67af27cd87af09a41c4d
      https://github.com/bluez/bluez/commit/97fa2525fb104856c80f67af27cd87af09a41c4d
  Author: Youwan Wang <youwan@nfschina.com>
  Date:   2024-03-22 (Fri, 22 Mar 2024)

  Changed paths:
    M obexd/src/manager.c

  Log Message:
  -----------
  obexd: Remove redundant judgments and fix code style


  Commit: 9250929edde3b5740e5cf3b33e58a075f0e640be
      https://github.com/bluez/bluez/commit/9250929edde3b5740e5cf3b33e58a075f0e640be
  Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
  Date:   2024-03-22 (Fri, 22 Mar 2024)

  Changed paths:
    M src/shared/btsnoop.c

  Log Message:
  -----------
  shared/btsnoop: Add proper identifiers for ISO packets

This adds ISO packets identifiers so they are properly stored on files.


Compare: https://github.com/bluez/bluez/compare/b8ad3490a350...9250929edde3

To unsubscribe from these emails, change your notification settings at https://github.com/bluez/bluez/settings/notifications

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2024-03-22 10:07 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-03-22 10:07 [bluez/bluez] bbf198: Fix crash in iov_append_ltv function Luiz Augusto von Dentz

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).