Bluetooth: qca: fix info leak when fetching fw build id

Browse source

Add the missing sanity checks and move the 255-byte build-id buffer off
the stack to avoid leaking stack data through debugfs in case the
build-info reply is malformed.

Fixes: c0187b0bd3 ("Bluetooth: btqca: Add support to read FW build version for WCN3991 BTSoC")
Cc: stable@vger.kernel.org	# 5.12
Signed-off-by: Johan Hovold <johan+linaro@kernel.org>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>

...

This commit is contained in:

Johan Hovold 2024-05-01 14:34:52 +02:00 • committed by Luiz Augusto von Dentz

parent dd336649ba

commit cda0d6a198

2 changed files with 21 additions and 5 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

27

drivers/bluetooth/btqca.c

View file

1

drivers/bluetooth/btqca.h

View file