MIME-Version: 1.0
References: <20230210041030.865478-1-zyytlz.wz@163.com> <868017d2-c85f-20a1-292f-0b97ab8bf752@molgen.mpg.de>
In-Reply-To: <868017d2-c85f-20a1-292f-0b97ab8bf752@molgen.mpg.de>
From:   Zheng Hacker <hackerzheng666@gmail.com>
Date:   Mon, 13 Feb 2023 16:21:58 +0800
Message-ID: <CAJedcCx9Ur4a7isrEEDRaCThq2T=3=Z9b1dmfjUNh5qABkdBqg@mail.gmail.com>
Subject: Re: [PATCH] Bluetooth: hci_core: Fix poential Use-after-Free bug in hci_remove_adv_monitor
To:     Paul Menzel <pmenzel@molgen.mpg.de>
Cc:     Zheng Wang <zyytlz.wz@163.com>, marcel@holtmann.org,
        alex000young@gmail.com, johan.hedberg@gmail.com,
        luiz.dentz@gmail.com, davem@davemloft.net, edumazet@google.com,
        kuba@kernel.org, pabeni@redhat.com,
        linux-bluetooth@vger.kernel.org, netdev@vger.kernel.org,
        linux-kernel@vger.kernel.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Precedence: bulk

Paul Menzel <pmenzel@molgen.mpg.de> =E4=BA=8E2023=E5=B9=B42=E6=9C=8813=E6=
=97=A5=E5=91=A8=E4=B8=80 16:19=E5=86=99=E9=81=93=EF=BC=9A
>
> Dear Zheng,
>
>
> Thank you for your patch.
>
> Am 10.02.23 um 05:10 schrieb Zheng Wang:
> > In hci_remove_adv_monitor, if it gets into HCI_ADV_MONITOR_EXT_MSFT cas=
e,
> > the function will free the monitor and print its handle after that.
> >
> > Fix it by switch the order.
>
> =E2=80=A6 by switch*ing* =E2=80=A6
>
> There is a small typo in the commit message summary/title: po*t*ential
>
Hi Paul,

Thanks for pointing that out ^^. Will correct it in the next version of pat=
ch.

Best regards,
Zheng Wang