Received-SPF: pass (google.com: domain of linux-bluetooth-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Luiz Augusto von Dentz <luiz.dentz@gmail.com>
To:     davem@davemloft.net, kuba@kernel.org
Cc:     linux-bluetooth@vger.kernel.org, netdev@vger.kernel.org
Subject: pull-request: bluetooth 2023-04-07
Date:   Fri,  7 Apr 2023 12:32:01 -0700
Message-Id: <20230407193201.3430140-1-luiz.dentz@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Precedence: bulk

The following changes since commit b9881d9a761a7e078c394ff8e30e1659d74f898f:

  Merge branch 'bonding-ns-validation-fixes' (2023-04-07 08:47:20 +0100)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git tags/for-net-2023-04-07

for you to fetch changes up to 501455403627300b45e33d41e0730f862618449b:

  Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (2023-04-07 12:18:09 -0700)

----------------------------------------------------------------
bluetooth pull request for net:

 - Fix not setting Dath Path for broadcast sink
 - Fix not cleaning up on LE Connection failure
 - SCO: Fix possible circular locking dependency
 - L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
 - Fix race condition in hidp_session_thread
 - btbcm: Fix logic error in forming the board name
 - btbcm: Fix use after free in btsdio_remove

----------------------------------------------------------------
Claudia Draghicescu (1):
      Bluetooth: Set ISO Data Path on broadcast sink

Luiz Augusto von Dentz (6):
      Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure
      Bluetooth: Fix printing errors if LE Connection times out
      Bluetooth: SCO: Fix possible circular locking dependency on sco_connect_cfm
      Bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt
      Bluetooth: hci_conn: Fix possible UAF
      Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}

Min Li (1):
      Bluetooth: Fix race condition in hidp_session_thread

Sasha Finkelstein (1):
      bluetooth: btbcm: Fix logic error in forming the board name.

Zheng Wang (1):
      Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition

 drivers/bluetooth/btbcm.c        |  2 +-
 drivers/bluetooth/btsdio.c       |  1 +
 include/net/bluetooth/hci_core.h |  1 +
 net/bluetooth/hci_conn.c         | 61 ++++++++++++++++++----------
 net/bluetooth/hci_event.c        | 18 ++++-----
 net/bluetooth/hci_sync.c         | 13 ++++--
 net/bluetooth/hidp/core.c        |  2 +-
 net/bluetooth/l2cap_core.c       | 24 +++---------
 net/bluetooth/sco.c              | 85 +++++++++++++++++++++++-----------------
 9 files changed, 116 insertions(+), 91 deletions(-)