Dan Carpenter 788ae2ae4c Bluetooth: Fix error code in chan_alloc_skb_cb() ...

[ Upstream commit 72d061ee630d0dbb45c2920d8d19b3861c413e54 ]

The chan_alloc_skb_cb() function is supposed to return error pointers on
error.  Returning NULL will lead to a NULL dereference.

Fixes: 6b8d4a6a0314 ("Bluetooth: 6LoWPAN: Use connected oriented channel instead of fixed one")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-03-28 21:59:00 +01:00

..

bnep

Bluetooth: bnep: fix wild-memory-access in proto_unregister

2024-11-01 01:56:01 +01:00

cmtp

…

hidp

…

rfcomm

Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"

2025-03-28 21:58:49 +01:00

6lowpan.c

Bluetooth: Fix error code in chan_alloc_skb_cb()

2025-03-28 21:59:00 +01:00

a2mp.c

…

a2mp.h

…

af_bluetooth.c

Revert "Bluetooth: af_bluetooth: Fix deadlock"

2024-11-17 15:07:19 +01:00

amp.c

…

amp.h

…

aosp.c

…

aosp.h

…

ecdh_helper.c

…

ecdh_helper.h

…

eir.c

Bluetooth: Fix eir name length

2024-03-26 18:20:42 -04:00

eir.h

…

hci_codec.c

…

hci_codec.h

…

hci_conn.c

Revert "Bluetooth: hci_conn: Consolidate code for aborting connections"

2024-11-17 15:07:19 +01:00

hci_core.c

Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"

2025-03-28 21:58:49 +01:00

hci_debugfs.c

Bluetooth: Fix TOCTOU in HCI debugfs implementation

2024-04-10 16:28:24 +02:00

hci_debugfs.h

…

hci_event.c

Bluetooth: hci_event: Fix enabling passive scanning

2025-03-28 21:58:48 +01:00

hci_request.c

Bluetooth: Fix memory leak in hci_req_sync_complete()

2024-04-17 11:18:22 +02:00

hci_request.h

…

hci_sock.c

Bluetooth: hci_sock: Fix not validating setsockopt user input

2024-10-17 15:21:33 +02:00

hci_sync.c

Bluetooth: hci_sync: Fix not setting Random Address when required

2025-01-17 13:34:39 +01:00

hci_sysfs.c

Bluetooth: fix use-after-free in device_for_each_child()

2024-12-14 19:53:34 +01:00

iso.c

Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"

2025-03-28 21:58:49 +01:00

Kconfig

…

l2cap_core.c

Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"

2025-03-28 21:58:49 +01:00

l2cap_sock.c

Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection

2025-02-21 13:49:40 +01:00

leds.c

…

leds.h

…

lib.c

…

Makefile

…

mgmt_config.c

…

mgmt_config.h

…

mgmt_util.c

…

mgmt_util.h

…

mgmt.c

Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()

2025-03-13 12:53:14 +01:00

msft.c

Bluetooth: msft: fix slab-use-after-free in msft_do_close()

2024-05-17 11:56:11 +02:00

msft.h

Bluetooth: msft: fix slab-use-after-free in msft_do_close()

2024-05-17 11:56:11 +02:00

sco.c

Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"

2025-03-28 21:58:49 +01:00

selftest.c

…

selftest.h

…

smp.c

Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"

2024-09-12 11:10:17 +02:00

smp.h

…