Re: [PATCH] Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255

Hello:

This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <[email protected]>:

On Thu,  6 Aug 2026 17:39:53 +0000 you wrote:
> mgmt_hci_cmd_sync() checks that the message length agrees with params_len
> but puts no upper bound on it. params_len is __le16 while the parameter
> length in the HCI command header is a u8:
> 
> 	struct hci_command_hdr {
> 		__le16	opcode;
> 		__u8	plen;
> 	} __packed;
> 
> [...]

Here is the summary with links:
  - Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255
    https://git.kernel.org/bluetooth/bluetooth-next/c/0ed4fd40f49c

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html