Re: [PATCH] work around for l2cap NULL dereference in l2cap_conn_start
From: Gustavo F. Padovan <hidden>
Date: 2011-02-28 17:29:51
Also in:
lkml
From: Gustavo F. Padovan <hidden>
Date: 2011-02-28 17:29:51
Also in:
lkml
Hi David, * David Fries [off-list ref] [2011-02-27 23:03:40 -0600]:
On Sun, Feb 27, 2011 at 04:15:45PM -0300, Gustavo F. Padovan wrote:quoted
I pushed the following patch to bluetooth-2.6 tree. It should fix the problem by avoiding connections to be accepted before a L2CAP info response comes:Is git://git.kernel.org/pub/scm/linux/kernel/git/padovan/bluetooth-2.6.git the bluetooth-2.6 tree you mentioned? I don't see your patch there. As a side note, the inline patch in your e-mail has the tabs replaced by spaces, once I changed them, it applied cleanly. I first reverted to the base N900 kernel-power-2.6.28 46 (none of my changes or debugging), it crashed as expected. I then applied your patch 743400e0, and it still crashed. I added back the l2cap_conn_start parent check and some debugging in af_bluetooth.c dmesg debug output and patches follow.
I want to see a test with this patch and a recent kernel. We added many fixes to stack in the last two years. Can you test this scenario? -- Gustavo F. Padovan http://profusion.mobi