From: Bastien Nocera <hadess@hadess.net>
To: linux-bluetooth@vger.kernel.org
Subject: [BlueZ, v3 0/9] 3 SDP XML security fixes
Date: Tue, 11 Aug 2026 16:54:03 +0200 [thread overview]
Message-ID: <20260811145704.1766949-1-hadess@hadess.net> (raw)
Changes since v2:
- Reorder commits so that unit tests are added after the fix, so as
not to break "git bisect"
- Add "Fix stack overflow when converting large sequences to XML" patch
- Fix crash in unit test when test files are missing
Changes since v1:
- Added "Fix memory leak when adding duplicate attributes"
Bastien Nocera (9):
unit: Add test for sdp_xml_parse_record()
sdp-xml: Fix crash caused by type confusion when parsing crafted SDP
XML
unit: Add test for sdp-xml type-confusion bug
sdp-xml: Fix memory leak when adding duplicate attributes
unit: Add test for sdp-xml duplicate attribute bug
sdp-xml: Optimise parsing large sequences
unit: Add test for slow element_end() append
sdp-xml: Fix stack overflow when converting large sequences to XML
unit: Add convert_sdp_record_to_xml() to SDP XML testing
Makefile.am | 10 ++
src/sdp-xml.c | 55 ++++++-
unit/sdp-xml/Bluetooth_HID-sdp_record.xml | 123 ++++++++++++++++
.../compute-seq-size-type-confusion.xml | 9 ++
unit/sdp-xml/duplicate-attribute.xml | 4 +
unit/sdp-xml/qt-SerialPortSDPRecord.xml | 57 +++++++
unit/test-sdp-xml.c | 139 ++++++++++++++++++
7 files changed, 390 insertions(+), 7 deletions(-)
create mode 100644 unit/sdp-xml/Bluetooth_HID-sdp_record.xml
create mode 100644 unit/sdp-xml/compute-seq-size-type-confusion.xml
create mode 100644 unit/sdp-xml/duplicate-attribute.xml
create mode 100644 unit/sdp-xml/qt-SerialPortSDPRecord.xml
create mode 100644 unit/test-sdp-xml.c
--
2.55.0
next reply other threads:[~2026-08-11 15:10 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-08-11 14:54 Bastien Nocera [this message]
2026-08-11 14:54 ` [BlueZ, v3 1/9] unit: Add test for sdp_xml_parse_record() Bastien Nocera
2026-08-11 16:33 ` 3 SDP XML security fixes bluez.test.bot
2026-08-11 14:54 ` [BlueZ, v3 2/9] sdp-xml: Fix crash caused by type confusion when parsing crafted SDP XML Bastien Nocera
2026-08-11 14:54 ` [BlueZ, v3 3/9] unit: Add test for sdp-xml type-confusion bug Bastien Nocera
2026-08-11 14:54 ` [BlueZ, v3 4/9] sdp-xml: Fix memory leak when adding duplicate attributes Bastien Nocera
2026-08-11 14:54 ` [BlueZ, v3 5/9] unit: Add test for sdp-xml duplicate attribute bug Bastien Nocera
2026-08-11 14:54 ` [BlueZ, v3 6/9] sdp-xml: Optimise parsing large sequences Bastien Nocera
2026-08-11 14:54 ` [BlueZ, v3 7/9] unit: Add test for slow element_end() append Bastien Nocera
2026-08-11 14:54 ` [BlueZ, v3 8/9] sdp-xml: Fix stack overflow when converting large sequences to XML Bastien Nocera
2026-08-11 14:54 ` [BlueZ, v3 9/9] unit: Add convert_sdp_record_to_xml() to SDP XML testing Bastien Nocera
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260811145704.1766949-1-hadess@hadess.net \
--to=hadess@hadess.net \
--cc=linux-bluetooth@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox