From: patchwork-bot+bluetooth@kernel.org
To: Laxman Acharya <acharyalaxman8848@gmail.com>
Cc: luiz.dentz@gmail.com, marcel@holtmann.org,
linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org
Subject: Re: [PATCH] Bluetooth: hci_event: fix out-of-bounds read in LE PA report reassembly
Date: Fri, 07 Aug 2026 16:30:08 +0000 [thread overview]
Message-ID: <178612020889.1887768.16877650332160888837.git-patchwork-notify@kernel.org> (raw)
In-Reply-To: <20260805173701.6649-1-acharyalaxman8848@gmail.com>
Hello:
This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:
On Wed, 5 Aug 2026 23:22:01 +0545 you wrote:
> hci_le_per_adv_report_evt() is dispatched with a minimum length of
> sizeof(struct hci_ev_le_per_adv_report), which only covers the fixed
> part of the event and not the trailing data[] array:
>
> struct hci_ev_le_per_adv_report {
> __le16 sync_handle;
> __u8 tx_power;
> __u8 rssi;
> __u8 cte_type;
> __u8 data_status;
> __u8 length;
> __u8 data[];
> } __packed;
>
> [...]
Here is the summary with links:
- Bluetooth: hci_event: fix out-of-bounds read in LE PA report reassembly
https://git.kernel.org/bluetooth/bluetooth-next/c/96995a7d94f3
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
prev parent reply other threads:[~2026-08-07 16:30 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-08-05 17:37 [PATCH] Bluetooth: hci_event: fix out-of-bounds read in LE PA report reassembly Laxman Acharya
2026-08-05 19:41 ` bluez.test.bot
2026-08-07 16:30 ` patchwork-bot+bluetooth [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178612020889.1887768.16877650332160888837.git-patchwork-notify@kernel.org \
--to=patchwork-bot+bluetooth@kernel.org \
--cc=acharyalaxman8848@gmail.com \
--cc=linux-bluetooth@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=luiz.dentz@gmail.com \
--cc=marcel@holtmann.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.