Re: [PATCH BlueZ v2 0/8] Fix handling of malformed GATT PDUs

[patchwork-bot+bluetooth@kernel.org]

Hello:

This series was applied to bluetooth/bluez.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:

On Fri,  6 Nov 2026 13:33:42 -0500 you wrote:
> From: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
> 
> This fixes several places where GATT PDUs received from the peer are
> used without proper validation:
> 
>  - Read By Type responses with an invalid Attribute Data Length could
>    cause a division by zero and out-of-bounds reads during discovery.
>  - Notifications and indications shorter than a handle wrapped the
>    value length to 65534, passing data past the received buffer to the
>    registered handlers.
>  - Read Multiple Variable Length opcodes were missing from the ATT
>    tables, so the server never responded to the request, and the
>    client response parser did not advance past each value.
>  - Database Hash and Extended Properties values were read without
>    checking their length.
> 
> [...]

Here is the summary with links:
  - [BlueZ,v2,1/8] shared/gatt: Validate Read By Type responses
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=02acfdbe0374
  - [BlueZ,v2,2/8] unit/test-gatt: Add malformed Read By Type response tests
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=730d0138bf30
  - [BlueZ,v2,3/8] shared/gatt-client: Fix handling of short notifications
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=2d41b1aab0b8
  - [BlueZ,v2,4/8] unit/test-gatt: Add short notification test
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=ea2ab6628b8d
  - [BlueZ,v2,5/8] shared/att: Add Read Multiple Variable Length opcodes
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=0c2f60273e63
  - [BlueZ,v2,6/8] shared/gatt-client: Fix parsing Read Multiple Variable Length response
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=3b15e6d5bb70
  - [BlueZ,v2,7/8] shared/gatt-client: Check value lengths before reading them
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=bf1fd8831d56
  - [BlueZ,v2,8/8] unit/test-gatt: Add Read Multiple Variable Length tests
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=aa4f5ce97c87

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html