Subject: Re: [PATCH 2/2] Bluetooth: check the buffer size for some messages before parsing

From: Greg Kroah-Hartman <[email-masked]>
Date: Thu, 10 Jan 2019 07:30:13 +0100

On Thu, Jan 10, 2019 at 07:29:17AM +0100, Greg Kroah-Hartman wrote:
> The L2CAP_CONF_EFS and L2CAP_CONF_RFC messages can be sent from
> userspace so their structure sizes need to be checked before parsing
> them.
> 
> Based on a patch from Ran Menscher.

Ran, can you verify if these two patches solve the problems you reported
or not?

thanks,

greg k-h