[bluez/bluez] 340fde: btio: fix range validation of security level

[bluez/bluez] 340fde: btio: fix range validation of security level

[github-actions[bot]]

  Branch: refs/heads/980540
  Home:   https://github.com/bluez/bluez
  Commit: 340fde776e00622969c475989ad8a1badc2c075b
      https://github.com/bluez/bluez/commit/340fde776e00622969c475989ad8a1badc2c075b
  Author: Ismagil Iskakov <i.iskakov@omp.ru>
  Date:   2025-07-09 (Wed, 09 Jul 2025)

  Changed paths:
    M btio/btio.c

  Log Message:
  -----------
  btio: fix range validation of security level

Arrays inside l2cap_set_lm/rfcomm_set_lm functions are of size 4,
but the bounds check allows the value 4 for 'level'.


  Commit: 29361026d98a59655d4810873a7aff5e5f868d7b
      https://github.com/bluez/bluez/commit/29361026d98a59655d4810873a7aff5e5f868d7b
  Author: Ismagil Iskakov <i.iskakov@omp.ru>
  Date:   2025-07-09 (Wed, 09 Jul 2025)

  Changed paths:
    M profiles/audio/a2dp.c
    M profiles/audio/avrcp.c
    M profiles/audio/bass.c

  Log Message:
  -----------
  profiles/audio: add nullity checks

Cover bass_setup unsuccessful search and btd_device_get_service.
This change is motivated by the other usages where checks for
NULL exist.


  Commit: c653ac1fb8725f9d0a0c3eb0a0a94d4d8365df8d
      https://github.com/bluez/bluez/commit/c653ac1fb8725f9d0a0c3eb0a0a94d4d8365df8d
  Author: Ismagil Iskakov <i.iskakov@omp.ru>
  Date:   2025-07-09 (Wed, 09 Jul 2025)

  Changed paths:
    M src/shared/bap.c
    M src/shared/vcp.c

  Log Message:
  -----------
  src/shared: add nullity checks

Check util_iov_pull_mem where iov len is not verified
beforehand. Check vcp_get_vcs for NULL.
These changes are based on other usages where those
checks exist.


  Commit: b004030371dbf83e35c4b6638db5cfd289f159ba
      https://github.com/bluez/bluez/commit/b004030371dbf83e35c4b6638db5cfd289f159ba
  Author: Ismagil Iskakov <i.iskakov@omp.ru>
  Date:   2025-07-09 (Wed, 09 Jul 2025)

  Changed paths:
    M obexd/client/transfer.c

  Log Message:
  -----------
  obexd/client: fix err condition causing memleak

transfer_open returns 0 if an error occurs, condition corrected.


Compare: https://github.com/bluez/bluez/compare/340fde776e00%5E...b004030371db

To unsubscribe from these emails, change your notification settings at https://github.com/bluez/bluez/settings/notifications