Unverified Commit e716fc2c authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!9368 CVE-2024-27416 

Merge Pull Request from: @ci-robot 
 
PR sync from: Yongqiang Liu <liuyongqiang13@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/IFAYQ6WN6QM53RT6RRXJRHCTIISWCV7E/ 
Luiz Augusto von Dentz (1):
  Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST


-- 
2.34.1
 
https://gitee.com/src-openeuler/kernel/issues/I9Q8M1 
 
Link:https://gitee.com/openeuler/kernel/pulls/9368

 

Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Signed-off-by: default avatarXie XiuQi <xiexiuqi@huawei.com>
parents b1eaa718 4543e00c

net/bluetooth/hci_event.c

+4 −1
Original line number Diff line number Diff line
@@ -4620,9 +4620,12 @@ static void hci_io_capa_request_evt(struct hci_dev *hdev, struct sk_buff *skb) 
	hci_dev_lock(hdev);



	conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK, &ev->bdaddr);

	if (!conn || !hci_conn_ssp_enabled(conn))

	if (!conn || !hci_dev_test_flag(hdev, HCI_SSP_ENABLED))

		goto unlock;



	/* Assume remote supports SSP since it has triggered this event */

	set_bit(HCI_CONN_SSP_ENABLED, &conn->flags);



	hci_conn_hold(conn);



	if (!hci_dev_test_flag(hdev, HCI_MGMT))