pull request: bluetooth 2024-05-03

pull request: bluetooth 2024-05-03

[Luiz Augusto von Dentz]

The following changes since commit f2db7230f73a80dbb179deab78f88a7947f0ab7e:

  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (2024-05-02 19:02:46 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git tags/for-net-2024-05-03

for you to fetch changes up to 40d442f969fb1e871da6fca73d3f8aef1f888558:

  Bluetooth: qca: fix firmware check error path (2024-05-03 13:05:55 -0400)

----------------------------------------------------------------
bluetooth pull request for net:

 - mediatek: mt8183-pico6: Fix bluetooth node
 - sco: Fix use-after-free bugs caused by sco_sock_timeout
 - l2cap: fix null-ptr-deref in l2cap_chan_timeout
 - qca: Various fixes
 - l2cap: Fix slab-use-after-free in l2cap_connect()
 - msft: fix slab-use-after-free in msft_do_close()
 - HCI: Fix potential null-ptr-deref

----------------------------------------------------------------
Chen-Yu Tsai (1):
      arm64: dts: mediatek: mt8183-pico6: Fix bluetooth node

Duoming Zhou (2):
      Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
      Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout

Johan Hovold (7):
      Bluetooth: qca: fix wcn3991 device address check
      Bluetooth: qca: add missing firmware sanity checks
      Bluetooth: qca: fix NVM configuration parsing
      Bluetooth: qca: generalise device address check
      Bluetooth: qca: fix info leak when fetching fw build id
      Bluetooth: qca: fix info leak when fetching board id
      Bluetooth: qca: fix firmware check error path

Sungwoo Kim (3):
      Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()
      Bluetooth: msft: fix slab-use-after-free in msft_do_close()
      Bluetooth: HCI: Fix potential null-ptr-deref

 .../dts/mediatek/mt8183-kukui-jacuzzi-pico6.dts    |   3 +-
 drivers/bluetooth/btqca.c                          | 110 +++++++++++++++++----
 drivers/bluetooth/btqca.h                          |   3 +-
 net/bluetooth/hci_core.c                           |   3 +-
 net/bluetooth/hci_event.c                          |   2 +
 net/bluetooth/l2cap_core.c                         |  24 ++---
 net/bluetooth/msft.c                               |   2 +-
 net/bluetooth/msft.h                               |   4 +-
 net/bluetooth/sco.c                                |   4 +
 9 files changed, 119 insertions(+), 36 deletions(-)

Re: pull request: bluetooth 2024-05-03

[patchwork-bot+netdevbpf]

Hello:

This pull request was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@kernel.org>:

On Fri,  3 May 2024 13:19:33 -0400 you wrote:
> The following changes since commit f2db7230f73a80dbb179deab78f88a7947f0ab7e:
> 
>   tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (2024-05-02 19:02:46 -0700)
> 
> are available in the Git repository at:
> 
>   git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git tags/for-net-2024-05-03
> 
> [...]

Here is the summary with links:
  - pull request: bluetooth 2024-05-03
    https://git.kernel.org/netdev/net/c/f2d859045ec1

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Re: pull request: bluetooth 2024-05-03

[patchwork-bot+bluetooth]

Hello:

This pull request was applied to bluetooth/bluetooth-next.git (master)
by Jakub Kicinski <kuba@kernel.org>:

On Fri,  3 May 2024 13:19:33 -0400 you wrote:
> The following changes since commit f2db7230f73a80dbb179deab78f88a7947f0ab7e:
> 
>   tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (2024-05-02 19:02:46 -0700)
> 
> are available in the Git repository at:
> 
>   git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git tags/for-net-2024-05-03
> 
> [...]

Here is the summary with links:
  - pull request: bluetooth 2024-05-03
    https://git.kernel.org/bluetooth/bluetooth-next/c/f2d859045ec1

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html