linux/drivers/bluetooth
Jesper Juhl 57136ca6d5 [PATCH] Bluetooth: fix potential NULL ptr deref in dtl1_cs.c::dtl1_hci_send_frame()
There's a problem in drivers/bluetooth/dtl1_cs.c::dtl1_hci_send_frame()

If bt_skb_alloc() returns NULL, then skb_reserve(s, NSHL); will cause a
NULL pointer deref - ouch.  If we can't allocate the resources we require
we need to tell the caller by returning -ENOMEM.

Found by the coverity checker as bug #409

Signed-off-by: Jesper Juhl <jesper.juhl@gmail.com>
Acked-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2006-06-26 09:58:16 -07:00
..
Kconfig [Bluetooth] Remove TXCRC compile option for BCSP driver 2005-10-28 19:20:40 +02:00
Makefile Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
bcm203x.c [PATCH] USB: remove .owner field from struct usb_driver 2006-01-04 13:48:34 -08:00
bfusb.c [PATCH] USB: remove .owner field from struct usb_driver 2006-01-04 13:48:34 -08:00
bluecard_cs.c [PATCH] pcmcia: use bitfield instead of p_state and state 2006-03-31 17:26:33 +02:00
bpa10x.c [PATCH] USB: remove .owner field from struct usb_driver 2006-01-04 13:48:34 -08:00
bt3c_cs.c [PATCH] pcmcia: use bitfield instead of p_state and state 2006-03-31 17:26:33 +02:00
btuart_cs.c [PATCH] pcmcia: use bitfield instead of p_state and state 2006-03-31 17:26:33 +02:00
dtl1_cs.c [PATCH] Bluetooth: fix potential NULL ptr deref in dtl1_cs.c::dtl1_hci_send_frame() 2006-06-26 09:58:16 -07:00
hci_bcsp.c [PATCH] Unlinline a bunch of other functions 2006-01-14 18:27:06 -08:00
hci_h4.c [PATCH] bluetooth: kmalloc + memset -> kzalloc conversion 2005-11-07 07:54:00 -08:00
hci_ldisc.c [PATCH] TTY layer buffering revamp 2006-01-10 08:01:59 -08:00
hci_uart.h [Bluetooth] Cleanup of the HCI UART driver 2005-10-28 19:20:45 +02:00
hci_usb.c [PATCH] USB: remove .owner field from struct usb_driver 2006-01-04 13:48:34 -08:00
hci_usb.h [Bluetooth] Add ignore parameters to the HCI USB driver 2005-09-13 01:32:37 +02:00
hci_vhci.c [PATCH] bluetooth: kmalloc + memset -> kzalloc conversion 2005-11-07 07:54:00 -08:00