linux/net/bluetooth, branch v5.6

Bluetooth: Fix race condition in hci_release_sock()

2020-01-26T08:34:17Z

Syzbot managed to trigger a use after free "KASAN: use-after-free Write in hci_sock_bind". I have reviewed the code manually and one possibly cause I have found is that we are not holding lock_sock(sk) when we do the hci_dev_put(hdev) in hci_sock_release(). My theory is that the bind and the release are racing against each other which results in this use after free. Reported-by: syzbot+eba992608adf3d796bcc@syzkaller.appspotmail.com Signed-off-by: Dan Carpenter Signed-off-by: Johan Hedberg

Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le

2020-01-25T14:33:52Z

The debugfs entries for {min,max}_key_size are created during SMP registration and thus it might lead to multiple attempts to create the same entries. Avoid this by moving them to the LE controller init section. Signed-off-by: Marcel Holtmann Signed-off-by: Johan Hedberg

Bluetooth: Add missing checks for HCI_ISODATA_PKT packet type

2020-01-25T14:33:46Z

The checks for HCI_ISODATA_PKT packet type are required in a few additional locations to allow sending/receiving of this new packet type. Signed-off-by: Marcel Holtmann Signed-off-by: Johan Hedberg

Bluetooth: fix appearance typo in mgmt.c

2020-01-22T20:23:16Z

This change addresses a typo in the set_appearance handler. Signed-off-by: Alain Michaud Signed-off-by: Marcel Holtmann

Bluetooth: adding missing const decoration to mgmt_status_table

2020-01-22T16:37:25Z

This change simply adds a missing const decoration to the mtmt_status_table definition. Signed-off-by: Alain Michaud Signed-off-by: Marcel Holtmann

Bluetooth: Increment management interface revision

2020-01-16T07:40:47Z

Increment the mgmt revision due to the recently added commands. Signed-off-by: Marcel Holtmann Signed-off-by: Johan Hedberg

Bluetooth: Make use of __check_timeout on hci_sched_le

2020-01-15T21:28:51Z

This reuse __check_timeout on hci_sched_le following the same logic used hci_sched_acl. Signed-off-by: Luiz Augusto von Dentz Signed-off-by: Marcel Holtmann

Bluetooth: monitor: Add support for ISO packets

2020-01-15T21:28:51Z

This enables passing ISO packets to the monitor socket. Signed-off-by: Luiz Augusto von Dentz Signed-off-by: Marcel Holtmann

Bluetooth: Implementation of MGMT_OP_SET_BLOCKED_KEYS.

2020-01-15T21:28:41Z

MGMT command is added to receive the list of blocked keys from user-space. The list is used to: 1) Block keys from being distributed by the device during the ke distribution phase of SMP. 2) Filter out any keys that were previously saved so they are no longer used. Signed-off-by: Alain Michaud Signed-off-by: Marcel Holtmann

Bluetooth: remove redundant assignment to variable icid

2020-01-08T20:44:22Z

Variable icid is being rc is assigned with a value that is never read. The assignment is redundant and can be removed. Addresses-Coverity: ("Unused value") Signed-off-by: Colin Ian King Reviewed-by: Simon Horman Signed-off-by: Marcel Holtmann