plunky f29d4f3d37 two issues noted by maxv@ ... 1. If an adaptor sends repeated fragments indicating HCI_PACKET_START, we would leak mbufs. Fix that by releasing the previous in that case. 2. If an adaptor sends fragments which overflow the expected total payload length, it could build up the pending packet to use up system mbufs. Fix that by changing the unsigned calculation to a comparison and rejecting oversize packets		2018-09-07 14:47:15 +00:00
..
bluetooth.h
bt_proto.c
bt_sysctl.c
files.netbt
hci_event.c	Result of audit to check that mbuf length is checked before m_copydata()	2018-08-21 14:59:13 +00:00
hci_ioctl.c
hci_link.c	two issues noted by maxv@	2018-09-07 14:47:15 +00:00
hci_misc.c
hci_socket.c
hci_unit.c
hci.h
l2cap_lower.c
l2cap_misc.c
l2cap_signal.c	Result of audit to check that mbuf length is checked before m_copydata()	2018-08-21 14:59:13 +00:00
l2cap_socket.c
l2cap_upper.c
l2cap.h
Makefile
rfcomm_dlc.c	Rename min/max -> uimin/uimax for better honesty.	2018-09-03 16:29:22 +00:00
rfcomm_session.c	Rename min/max -> uimin/uimax for better honesty.	2018-09-03 16:29:22 +00:00
rfcomm_socket.c
rfcomm_upper.c	Rename min/max -> uimin/uimax for better honesty.	2018-09-03 16:29:22 +00:00
rfcomm.h
sco_socket.c
sco_upper.c
sco.h