[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <tencent_FFD6C6DB52C846598999EEF3AEC04CBFE706@qq.com>
Date: Sun, 16 Jun 2024 21:18:26 +0800
From: Edward Adam Davis <eadavis@...com>
To: paskripkin@...il.com
Cc: davem@...emloft.net,
eadavis@...com,
edumazet@...gle.com,
johan.hedberg@...il.com,
kuba@...nel.org,
linux-bluetooth@...r.kernel.org,
linux-kernel@...r.kernel.org,
luiz.dentz@...il.com,
luiz.von.dentz@...el.com,
marcel@...tmann.org,
netdev@...r.kernel.org,
pabeni@...hat.com,
syzbot+b2545b087a01a7319474@...kaller.appspotmail.com,
syzkaller-bugs@...glegroups.com,
william.xuanziyang@...wei.com
Subject: Re: [syzbot] [bluetooth?] WARNING in hci_conn_del
On Sun, 16 Jun 2024 13:37:17 +0300, Pavel Skripkin wrote:
> > hci_le_big_sync_established_evt is necessary to filter out cases where the handle
> > value is belone to ida id range, otherwise ida will be erroneously released in
> > hci_conn_cleanup.
> >
> > Fixes: 181a42edddf5 ("Bluetooth: Make handle of hci_conn be unique")
> > Reported-by: syzbot+b2545b087a01a7319474@...kaller.appspotmail.com
> > Signed-off-by: Edward Adam Davis <eadavis@...com>
> > ---
>
> There is one more user of `hci_conn_add` which may pass too big handle
> which is `hci_le_cis_req_evt`.
This case only affect hci_le_big_sync_established_evt.
--
Edward
Powered by blists - more mailing lists