diff options
| author | Gustavo A. R. Silva <[email protected]> | 2024-05-01 17:50:02 +0000 |
|---|---|---|
| committer | Luiz Augusto von Dentz <[email protected]> | 2024-05-14 14:51:07 +0000 |
| commit | 73b2652cbbb9993fe6a4340e6f5a2870d7ce6fb4 (patch) | |
| tree | d7e3625284016be39bdf1b8a63e0d59cae71c31f /net/bluetooth/l2cap_sock.c | |
| parent | Bluetooth: hci_conn: Use struct_size() in hci_le_big_create_sync() (diff) | |
| download | kernel-73b2652cbbb9993fe6a4340e6f5a2870d7ce6fb4.tar.gz kernel-73b2652cbbb9993fe6a4340e6f5a2870d7ce6fb4.zip | |
Bluetooth: hci_sync: Use cmd->num_cis instead of magic number
At the moment of the check, `cmd->num_cis` holds the value of 0x1f,
which is the max number of elements in the `cmd->cis[]` array at
declaration, which is 0x1f.
So, avoid using 0x1f directly, and instead use `cmd->num_cis`. Similarly
to this other patch[1].
Link: https://lore.kernel.org/linux-hardening/ZivaHUQyDDK9fXEk@neat/ [1]
Signed-off-by: Gustavo A. R. Silva <[email protected]>
Reviewed-by: Kees Cook <[email protected]>
Signed-off-by: Luiz Augusto von Dentz <[email protected]>
Diffstat (limited to 'net/bluetooth/l2cap_sock.c')
0 files changed, 0 insertions, 0 deletions