All of lore.kernel.org
 help / color / mirror / Atom feed
From: patchwork-bot+bluetooth@kernel.org
To: Luiz Augusto von Dentz <luiz.dentz@gmail.com>
Cc: linux-bluetooth@vger.kernel.org
Subject: Re: [PATCH v3 1/4] Bluetooth: Fix potential double free caused by hci_conn_unlink
Date: Wed, 03 May 2023 17:30:22 +0000	[thread overview]
Message-ID: <168313502225.19283.10886307523744996705.git-patchwork-notify@kernel.org> (raw)
In-Reply-To: <20230502212527.1662896-1-luiz.dentz@gmail.com>

Hello:

This series was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:

On Tue,  2 May 2023 14:25:24 -0700 you wrote:
> From: Ruihan Li <lrh2000@pku.edu.cn>
> 
> The hci_conn_unlink function is being called by hci_conn_del, which
> means it should not call hci_conn_del with the input parameter conn
> again. If it does, conn may have already been released when
> hci_conn_unlink returns, leading to potential UAF and double-free
> issues.
> 
> [...]

Here is the summary with links:
  - [v3,1/4] Bluetooth: Fix potential double free caused by hci_conn_unlink
    https://git.kernel.org/bluetooth/bluetooth-next/c/3214238e9dc7
  - [v3,2/4] Bluetooth: Refcnt drop must be placed last in hci_conn_unlink
    https://git.kernel.org/bluetooth/bluetooth-next/c/38e9b45310de
  - [v3,3/4] Bluetooth: Fix UAF in hci_conn_hash_flush again
    https://git.kernel.org/bluetooth/bluetooth-next/c/29f883dcbfd0
  - [v3,4/4] Bluetooth: Unlink CISes when LE disconnects in hci_conn_del
    https://git.kernel.org/bluetooth/bluetooth-next/c/e6e576ec4e72

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html



      parent reply	other threads:[~2023-05-03 17:30 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2023-05-02 21:25 [PATCH v3 1/4] Bluetooth: Fix potential double free caused by hci_conn_unlink Luiz Augusto von Dentz
2023-05-02 21:25 ` [PATCH v3 2/4] Bluetooth: Refcnt drop must be placed last in hci_conn_unlink Luiz Augusto von Dentz
2023-05-02 21:25 ` [PATCH v3 3/4] Bluetooth: Fix UAF in hci_conn_hash_flush again Luiz Augusto von Dentz
2023-05-02 21:25 ` [PATCH v3 4/4] Bluetooth: Unlink CISes when LE disconnects in hci_conn_del Luiz Augusto von Dentz
2023-05-02 21:57 ` [v3,1/4] Bluetooth: Fix potential double free caused by hci_conn_unlink bluez.test.bot
2023-05-03 13:34 ` [PATCH v3 1/4] " Ruihan Li
2023-05-03 17:30 ` patchwork-bot+bluetooth [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=168313502225.19283.10886307523744996705.git-patchwork-notify@kernel.org \
    --to=patchwork-bot+bluetooth@kernel.org \
    --cc=linux-bluetooth@vger.kernel.org \
    --cc=luiz.dentz@gmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.