Commit d8df010f authored by Haoxiang Li's avatar Haoxiang Li Committed by Luiz Augusto von Dentz
Browse files

Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected() 



Add check for the return value of mgmt_alloc_skb() in
mgmt_device_connected() to prevent null pointer dereference.

Fixes: e9674143 ("Bluetooth: mgmt: Make use of mgmt_send_event_skb in MGMT_EV_DEVICE_CONNECTED")
Cc: stable@vger.kernel.org
Signed-off-by: default avatarHaoxiang Li <haoxiang_li2024@163.com>
Signed-off-by: default avatarLuiz Augusto von Dentz <luiz.von.dentz@intel.com>
parent f2176a07

net/bluetooth/mgmt.c

+3 −0
Original line number Diff line number Diff line
@@ -9660,6 +9660,9 @@ void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn, 
				     sizeof(*ev) + (name ? eir_precalc_len(name_len) : 0) +

				     eir_precalc_len(sizeof(conn->dev_class)));



	if (!skb)

		return;



	ev = skb_put(skb, sizeof(*ev));

	bacpy(&ev->addr.bdaddr, &conn->dst);

	ev->addr.type = link_to_bdaddr(conn->type, conn->dst_type);