FreeBSD Bugzilla – Attachment 224936 Details for
Bug 255872
netgraph/bluetooth/hci: Fix a use after free in le_connection_complete
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
add goto out if ng_hci_lp_con_ind() error.
0001-netgraph-bluetooth-hci-uaf-le_connection.patch (text/plain), 479 bytes, created by
lylgood
on 2021-05-14 12:35:47 UTC
(
hide
)
Description:
add goto out if ng_hci_lp_con_ind() error.
Filename:
MIME Type:
Creator:
lylgood
Created:
2021-05-14 12:35:47 UTC
Size:
479 bytes
patch
obsolete
>diff --git a/sys/netgraph/bluetooth/hci/ng_hci_evnt.c b/sys/netgraph/bluetooth/hci/ng_hci_evnt.c >index 9e299d12fd1e..64ab4f0b36b9 100644 >--- a/sys/netgraph/bluetooth/hci/ng_hci_evnt.c >+++ b/sys/netgraph/bluetooth/hci/ng_hci_evnt.c >@@ -528,6 +528,7 @@ static int le_connection_complete(ng_hci_unit_p unit, struct mbuf *event) > if (error != 0) { > ng_hci_con_untimeout(con); > ng_hci_free_con(con); >+ goto out; > } > > } else if ((error = ng_hci_con_untimeout(con)) != 0)
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=224936">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 255872
: 224936