f29d4f3d37
1. If an adaptor sends repeated fragments indicating HCI_PACKET_START, we would leak mbufs. Fix that by releasing the previous in that case. 2. If an adaptor sends fragments which overflow the expected total payload length, it could build up the pending packet to use up system mbufs. Fix that by changing the unsigned calculation to a comparison and rejecting oversize packets |
||
---|---|---|
.. | ||
bluetooth.h | ||
bt_proto.c | ||
bt_sysctl.c | ||
files.netbt | ||
hci_event.c | ||
hci_ioctl.c | ||
hci_link.c | ||
hci_misc.c | ||
hci_socket.c | ||
hci_unit.c | ||
hci.h | ||
l2cap_lower.c | ||
l2cap_misc.c | ||
l2cap_signal.c | ||
l2cap_socket.c | ||
l2cap_upper.c | ||
l2cap.h | ||
Makefile | ||
rfcomm_dlc.c | ||
rfcomm_session.c | ||
rfcomm_socket.c | ||
rfcomm_upper.c | ||
rfcomm.h | ||
sco_socket.c | ||
sco_upper.c | ||
sco.h |