Re: [PATCH] rfcomm: fix information leak in rfcomm_sock_bind

2016-01-05 Thread Marcel Holtmann
Hi Insu, > if addr_len < sizeof(sa), sa.rc_bdaddr(4bytes) can be leaked > by using rfcomm_sock_getname() > > Signed-off-by: Insu Yun > --- > net/bluetooth/rfcomm/sock.c | 9 + > 1 file changed, 5 insertions(+), 4 deletions(-) > > diff --git a/net/bluetooth/rfcomm/sock.c b/net/bluetooth/

[PATCH] rfcomm: fix information leak in rfcomm_sock_bind

2016-01-05 Thread Insu Yun
if addr_len < sizeof(sa), sa.rc_bdaddr(4bytes) can be leaked by using rfcomm_sock_getname() Signed-off-by: Insu Yun --- net/bluetooth/rfcomm/sock.c | 9 + 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/net/bluetooth/rfcomm/sock.c b/net/bluetooth/rfcomm/sock.c index 7511df