Bluetooth: cmtp: cmtp_add_connection() should verify that it's dealing with l2cap socket
commit 96c26653ce65bf84f3212f8b00d4316c1efcbf4c upstream. ... rather than relying on ciptool(8) never passing it anything else. Give it e.g. an AF_UNIX connected socket (from socketpair(2)) and it'll oops, trying to evaluate &l2cap_pi(sock->sk)->chan->dst... Signed-off-by:Al Viro <viro@zeniv.linux.org.uk> Signed-off-by:
Marcel Holtmann <marcel@holtmann.org> Signed-off-by:
Willy Tarreau <w@1wt.eu>
Loading
Please register or sign in to comment