diff options
| author | Samuel Moelius <sam.moelius@trailofbits.com> | 2026-06-09 02:58:23 +0300 |
|---|---|---|
| committer | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2026-06-11 21:24:41 +0300 |
| commit | 88c2404a3c59c3126453919388dbd5ed98ed01bd (patch) | |
| tree | 8c27cede86a3d83a15688bab6830fcd1e97fa5b5 /tools/lib/python | |
| parent | a40a5f922546b3bd7c094d882b29177db4f2abe0 (diff) | |
| download | linux-88c2404a3c59c3126453919388dbd5ed98ed01bd.tar.xz | |
Bluetooth: vhci: validate devcoredump state before side effects
The VHCI force_devcoredump debugfs hook accepts a small test record from
userspace. It validates the requested terminal state only after
registering, initializing and appending a Bluetooth devcoredump.
As a result, an invalid state returns -EINVAL but still leaves queued
devcoredump work behind. With a non-zero timeout field, the rejected
write can still emit a devcoredump after the timeout expires.
Reject unsupported states before allocating the skb or changing the HCI
devcoredump state machine.
Fixes: ab4e4380d4e1 ("Bluetooth: Add vhci devcoredump support")
Assisted-by: Codex:gpt-5.5-cyber-preview
Signed-off-by: Samuel Moelius <sam.moelius@trailofbits.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Diffstat (limited to 'tools/lib/python')
0 files changed, 0 insertions, 0 deletions