Received-SPF: pass (google.com: domain of linux-bluetooth+bounces-2657-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) client-ip=2604:1380:4601:e00::3;
Content-Type: text/plain; charset="utf-8"
Precedence: bulk
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Subject: Re: [PATCH BlueZ] a2dp: fix setup->err use-after-free
From: patchwork-bot+bluetooth@kernel.org
Message-Id: 
 <171092703279.20558.12930550090274246801.git-patchwork-notify@kernel.org>
Date: Wed, 20 Mar 2024 09:30:32 +0000
References: <154e1a604eb8c3d924699489da72ea905915fb88.1710614196.git.pav@iki.fi>
In-Reply-To: <154e1a604eb8c3d924699489da72ea905915fb88.1710614196.git.pav@iki.fi>
To: Pauli Virtanen <pav@iki.fi>
Cc: linux-bluetooth@vger.kernel.org

Hello:

This patch was applied to bluetooth/bluez.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:

On Sat, 16 Mar 2024 20:36:38 +0200 you wrote:
> setup->err is set to values that either are on stack of avdtp.c
> routines, obtained from callbacks, or allocated on heap. This is
> inconsistent, and use-after-free in some cases.
> 
> Fix by always allocating setup->err ourselves, copying any values
> obtained from callbacks.  Add setup_error_set/init and do all setup->err
> manipulation via them.
> 
> [...]

Here is the summary with links:
  - [BlueZ] a2dp: fix setup->err use-after-free
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=c04b96dda5ce

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html