linux

mirror of https://github.com/hardkernel/linux.git synced 2026-03-31 18:23:00 +09:00

Files

Pavel Shpakovskiy 4bd2866db0 Bluetooth: hci_sync: fix set_local_name race condition

[ Upstream commit 6bbd0d3f0c23fc53c17409dd7476f38ae0ff0cd9 ]

Function set_name_sync() uses hdev->dev_name field to send
HCI_OP_WRITE_LOCAL_NAME command, but copying from data to hdev->dev_name
is called after mgmt cmd was queued, so it is possible that function
set_name_sync() will read old name value.

This change adds name as a parameter for function hci_update_name_sync()
to avoid race condition.

Fixes: 6f6ff38a1e ("Bluetooth: hci_sync: Convert MGMT_OP_SET_LOCAL_NAME")
Signed-off-by: Pavel Shpakovskiy <pashpakovskii@salutedevices.com>
Reviewed-by: Paul Menzel <pmenzel@molgen.mpg.de>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-09-04 15:30:21 +02:00

bluetooth.h

Bluetooth: SCO: Add support for 16 bits transparent voice setting

2024-12-19 18:11:34 +01:00

coredump.h

Bluetooth: Add support for hci devcoredump

2023-04-23 21:57:59 -07:00

hci_core.h

Bluetooth: hci_core: Fix use-after-free in vhci_flush()

2025-07-10 16:03:13 +02:00

hci_mon.h

Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name