From: Simon Horman <simon.horman@corigine.com>
To: Luiz Augusto von Dentz <luiz.dentz@gmail.com>
Cc: Chenyuan Mi <michenyuan@huawei.com>,
isdn@linux-pingi.de, marcel@holtmann.org,
johan.hedberg@gmail.com, davem@davemloft.net,
edumazet@google.com, kuba@kernel.org, pabeni@redhat.com,
netdev@vger.kernel.org, linux-bluetooth@vger.kernel.org,
linux-kernel@vger.kernel.org
Subject: Re: [PATCH v2 net-next] bluetooth: unregister correct BTPROTO for CMTP
Date: Wed, 5 Apr 2023 12:03:36 +0200 [thread overview]
Message-ID: <ZC1HeIAMhrN7NSHz@corigine.com> (raw)
In-Reply-To: <CABBYNZJmUfCqyn_+12s8KA0rRE0g_cv=hSKfj7grP58-g99y3g@mail.gmail.com>
On Tue, Apr 04, 2023 at 11:24:20AM -0700, Luiz Augusto von Dentz wrote:
> Hi,
>
> On Tue, Apr 4, 2023 at 8:40 AM Simon Horman <simon.horman@corigine.com> wrote:
> >
> > On Tue, Apr 04, 2023 at 09:52:58AM +0800, Chenyuan Mi wrote:
> > > On error unregister BTPROTO_CMTP to match the registration earlier in
> > > the same code-path. Without this change BTPROTO_HIDP is incorrectly
> > > unregistered.
> > >
> > > This bug does not appear to cause serious security problem.
> > >
> > > The function 'bt_sock_unregister' takes its parameter as an index and
> > > NULLs the corresponding element of 'bt_proto' which is an array of
> > > pointers. When 'bt_proto' dereferences each element, it would check
> > > whether the element is empty or not. Therefore, the problem of null
> > > pointer deference does not occur.
> > >
> > > Found by inspection.
> > >
> > > Fixes: 8c8de589cedd ("Bluetooth: Added /proc/net/cmtp via bt_procfs_init()")
> > > Signed-off-by: Chenyuan Mi <michenyuan@huawei.com>
> >
> > Reviewed-by: Simon Horman <simon.horman@corigine.com>
> >
> > > ---
> > > net/bluetooth/cmtp/sock.c | 2 +-
> > > 1 files changed, 1 insertions(+), 1 deletion(-)
> > >
> > > diff --git a/net/bluetooth/cmtp/sock.c b/net/bluetooth/cmtp/sock.c
> > > index 96d49d9fae96..cf4370055ce2 100644
> > > --- a/net/bluetooth/cmtp/sock.c
> > > +++ b/net/bluetooth/cmtp/sock.c
> > > @@ -250,7 +250,7 @@ int cmtp_init_sockets(void)
> > > err = bt_procfs_init(&init_net, "cmtp", &cmtp_sk_list, NULL);
> > > if (err < 0) {
> > > BT_ERR("Failed to create CMTP proc file");
> > > - bt_sock_unregister(BTPROTO_HIDP);
> > > + bt_sock_unregister(BTPROTO_CMTP);
> > > goto error;
> > > }
> > >
> > > --
> > > 2.25.1
> > >
>
> This one does not appear on pw for some reason, not sure if that was
> because of subject or what, so please resubmit it, don't forget to add
> Reviewed-by you got in this thread.
Yes, curious.
Perhaps it is due to the 'net-next' in the subject prefix.
I previously advised adding that, which I now see was
in correct as this is a Bluetooth patch. Sorry about that.
next prev parent reply other threads:[~2023-04-05 10:03 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-04-04 1:52 [PATCH v2 net-next] bluetooth: unregister correct BTPROTO for CMTP Chenyuan Mi
2023-04-04 15:40 ` Simon Horman
2023-04-04 18:24 ` Luiz Augusto von Dentz
2023-04-05 10:03 ` Simon Horman [this message]
-- strict thread matches above, loose matches on Subject: below --
2023-05-10 3:56 michenyuan
2023-04-04 1:50 Chenyuan Mi
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=ZC1HeIAMhrN7NSHz@corigine.com \
--to=simon.horman@corigine.com \
--cc=davem@davemloft.net \
--cc=edumazet@google.com \
--cc=isdn@linux-pingi.de \
--cc=johan.hedberg@gmail.com \
--cc=kuba@kernel.org \
--cc=linux-bluetooth@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=luiz.dentz@gmail.com \
--cc=marcel@holtmann.org \
--cc=michenyuan@huawei.com \
--cc=netdev@vger.kernel.org \
--cc=pabeni@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.