Johan Hedberg 6c0c331e4c Bluetooth: Check for minimum data length in eir_has_data_type() ... If passed 0 as data_length the (parsed < data_length - 1) test will be true and cause a buffer overflow. In practice we need at least two bytes for the element length and type so add a test for it to the very beginning of the function. Signed-off-by: Johan Hedberg <johan.hedberg@intel.com> Acked-by: Marcel Holtmann <marcel@holtmann.org> Signed-off-by: Gustavo Padovan <gustavo@padovan.org>		2012-03-28 12:02:40 -03:00
..
acpi	…
asm-generic	…
crypto	crypto: remove the second argument of k[un]map_atomic()	2012-03-20 21:48:16 +08:00
drm	…
keys	…
linux	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2012-03-21 13:25:04 -07:00
math-emu	…
media	…
misc	…
mtd	…
net	Bluetooth: Check for minimum data length in eir_has_data_type()	2012-03-28 12:02:40 -03:00
pcmcia	…
rdma	Merge branches 'cma', 'cxgb3', 'cxgb4', 'ehca', 'iser', 'mad', 'nes', 'qib', 'srp' and 'srpt' into for-next	2012-03-19 09:50:33 -07:00
rxrpc	…
scsi	…
sound	…
target	…
trace	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial	2012-03-20 21:12:50 -07:00
video	…
xen	…
Kbuild	…