mirror of
https://git.kernel.org/pub/scm/bluetooth/bluez.git
synced 2024-12-02 08:34:26 +08:00
2316c1ebe4
get_tid() may return NULL if bogus tid is passed.
This fix following crash:
Invalid write of size 1
at 0x4A0A643: memcpy@@GLIBC_2.14 (in /usr/lib64/valgrind/
vgpreload_memcheck-amd64-linux.so)
by 0x4218E4: search_attr_req (sdp.c:413)
by 0x42214D: sdp_packet (sdp.c:748)
by 0x41ED09: l2cap_frame (l2cap.c:2632)
by 0x414D51: packet_hci_acldata (packet.c:7713)
by 0x415133: packet_monitor (packet.c:3332)
by 0x404AEC: control_reader (control.c:911)
by 0x40231A: main (main.c:197)
Address 0x6 is not stack'd, malloc'd or (recently) free'd
Process terminating with default action of signal 11 (SIGSEGV)
Access not within mapped region at address 0x6
at 0x4A0A643: memcpy@@GLIBC_2.14 (in /usr/lib64/valgrind/
vgpreload_memcheck-amd64-linux.so)
by 0x4218E4: search_attr_req (sdp.c:413)
by 0x42214D: sdp_packet (sdp.c:748)
by 0x41ED09: l2cap_frame (l2cap.c:2632)
by 0x414D51: packet_hci_acldata (packet.c:7713)
by 0x415133: packet_monitor (packet.c:3332)
by 0x404AEC: control_reader (control.c:911)
by 0x40231A: main (main.c:197)
|
||
|---|---|---|
| .. | ||
| analyze.c | ||
| analyze.h | ||
| bt.h | ||
| btsnoop.c | ||
| btsnoop.h | ||
| control.c | ||
| control.h | ||
| crc.c | ||
| crc.h | ||
| display.c | ||
| display.h | ||
| ellisys.c | ||
| ellisys.h | ||
| hcidump.c | ||
| hcidump.h | ||
| hwdb.c | ||
| hwdb.h | ||
| keys.c | ||
| keys.h | ||
| l2cap.c | ||
| l2cap.h | ||
| ll.c | ||
| ll.h | ||
| lmp.c | ||
| lmp.h | ||
| main.c | ||
| mainloop.c | ||
| mainloop.h | ||
| packet.c | ||
| packet.h | ||
| rfcomm.h | ||
| sdp.c | ||
| sdp.h | ||
| uuid.c | ||
| uuid.h | ||
| vendor.c | ||
| vendor.h | ||