Skip to content

bluetooth: l2cap: validate alloc_buf user data #110393

@cfriedt

Description

@cfriedt

Describe the bug

In the bt_l2cap_chan_ops::alloc_buf le coc receive path, it's possible that a user check user data is of sufficient size.

Regression

  • This is a regression.

Steps to reproduce

No response

Relevant log output

Impact

Intermittent – Occurs occasionally; hard to reproduce.

Environment

No response

Additional Context

No response

Metadata

Metadata

Assignees

Type

No fields configured for Bug.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions