Bluetooth: Fix missing PDU length checks for SMP
authorJohan Hedberg <johan.hedberg@intel.com>
Tue, 18 Feb 2014 08:19:29 +0000 (10:19 +0200)
committerMarcel Holtmann <marcel@holtmann.org>
Tue, 18 Feb 2014 08:47:01 +0000 (00:47 -0800)
commitc46b98bea5691c0ed99da85cf0cb87bc146468e9
tree5f494bdab63e96708e19835353cae906d7e0d2c7
parentc6beca0e0dc70c439894337e82609ec3b79ed900
Bluetooth: Fix missing PDU length checks for SMP

For each received SMP PDU we need to check that we have enough data to
fit the specified size of the PDU. This patch adds the necessary checks
for each SMP PDU handler and ensures that buffer overflows do not occur
if to little data has been received.

Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
net/bluetooth/smp.c