public inbox for linux-bluetooth@vger.kernel.org
 help / color / mirror / Atom feed
* [bluez/bluez] 9e76fb: bthost: Fix crash on l2cap_ecred_conn_rsp
@ 2025-10-13 17:44 Luiz Augusto von Dentz
  0 siblings, 0 replies; only message in thread
From: Luiz Augusto von Dentz @ 2025-10-13 17:44 UTC (permalink / raw)
  To: linux-bluetooth

  Branch: refs/heads/master
  Home:   https://github.com/bluez/bluez
  Commit: 9e76fb9f6ce830cebb71a0b54a662ea8bb50bd54
      https://github.com/bluez/bluez/commit/9e76fb9f6ce830cebb71a0b54a662ea8bb50bd54
  Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
  Date:   2025-10-13 (Mon, 13 Oct 2025)

  Changed paths:
    M emulator/bthost.c

  Log Message:
  -----------
  bthost: Fix crash on l2cap_ecred_conn_rsp

This fixes the following crash:

Invalid read of size 2
   at 0x4019907: l2cap_ecred_conn_rsp (bthost.c:2554)
   by 0x4019907: l2cap_le_sig (bthost.c:2650)
   by 0x4019907: process_l2cap (bthost.c:3137)
   by 0x401BBA3: process_acl (bthost.c:3242)
   by 0x401BBA3: bthost_receive_h4 (bthost.c:3402)
   by 0x4008835: receive_bthost (bluetooth.c:2989)
   by 0x493B862: ??? (in /usr/lib64/libglib-2.0.so.0.8400.4)
   by 0x49447A7: ??? (in /usr/lib64/libglib-2.0.so.0.8400.4)
   by 0x4944A4E: g_main_loop_run (in /usr/lib64/libglib-2.0.so.0.8400.4)
   by 0x402645D: mainloop_run (mainloop-glib.c:65)
   by 0x4026A34: mainloop_run_with_signal (mainloop-notify.c:196)
   by 0x4025C55: tester_run (tester.c:1084)
   by 0x4002A7B: main (l2cap-tester.c:2799)
 Address 0x400bc02a4 is not stack'd, malloc'd or (recently) free'd



To unsubscribe from these emails, change your notification settings at https://github.com/bluez/bluez/settings/notifications

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2025-10-13 17:44 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-10-13 17:44 [bluez/bluez] 9e76fb: bthost: Fix crash on l2cap_ecred_conn_rsp Luiz Augusto von Dentz

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox