Re: [PATCH v2] Bluetooth: btusb: validate Realtek vendor event length
| Newsgroups | org.kernel.vger.linux-bluetooth,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <178457880938.4151939.12864032373120218164.git-patchwork-notify@kernel.org> |
Hello: This patch was applied to bluetooth/bluetooth-next.git (master) by Luiz Augusto von Dentz <[email protected]>: On Mon, 20 Jul 2026 19:47:17 +0800 you wrote: > btusb_recv_event_realtek() reads the event code at data[0] and the Realtek > subevent code at data[2] before deciding whether to consume a vendor event > as a coredump. > > For example, the two-byte event ff 00 contains a complete vendor-event > header declaring zero parameters. The old classifier still reads a > nonexistent third byte and can misclassify the event as a coredump if the > adjacent byte is 0x34. > > [...] Here is the summary with links: - [v2] Bluetooth: btusb: validate Realtek vendor event length https://git.kernel.org/bluetooth/bluetooth-next/c/891916abe16f You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html