Commit f2176a07 authored by Haoxiang Li's avatar Haoxiang Li Committed by Luiz Augusto von Dentz
Browse files

Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() 



Add check for the return value of mgmt_alloc_skb() in
mgmt_remote_name() to prevent null pointer dereference.

Fixes: ba17bb62 ("Bluetooth: Fix skb allocation in mgmt_remote_name() & mgmt_device_connected()")
Cc: stable@vger.kernel.org
Signed-off-by: default avatarHaoxiang Li <haoxiang_li2024@163.com>
Signed-off-by: default avatarLuiz Augusto von Dentz <luiz.von.dentz@intel.com>
parent cbf85b9c

net/bluetooth/mgmt.c

+2 −0
Original line number Diff line number Diff line
@@ -10413,6 +10413,8 @@ void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type, 


	skb = mgmt_alloc_skb(hdev, MGMT_EV_DEVICE_FOUND,

			     sizeof(*ev) + (name ? eir_precalc_len(name_len) : 0));

	if (!skb)

		return;



	ev = skb_put(skb, sizeof(*ev));

	bacpy(&ev->addr.bdaddr, bdaddr);