mirror of
https://github.com/armbian/build.git
synced 2025-08-11 21:56:58 +02:00
535 lines
18 KiB
Diff
535 lines
18 KiB
Diff
diff --git a/Makefile b/Makefile
|
|
index 6c787cd1cb514..a4622ef65436e 100644
|
|
--- a/Makefile
|
|
+++ b/Makefile
|
|
@@ -1,7 +1,7 @@
|
|
# SPDX-License-Identifier: GPL-2.0
|
|
VERSION = 5
|
|
PATCHLEVEL = 8
|
|
-SUBLEVEL = 15
|
|
+SUBLEVEL = 16
|
|
EXTRAVERSION =
|
|
NAME = Kleptomaniac Octopus
|
|
|
|
diff --git a/drivers/crypto/bcm/cipher.c b/drivers/crypto/bcm/cipher.c
|
|
index a353217a0d33e..530c7d9437dd6 100644
|
|
--- a/drivers/crypto/bcm/cipher.c
|
|
+++ b/drivers/crypto/bcm/cipher.c
|
|
@@ -2930,7 +2930,6 @@ static int aead_gcm_ccm_setkey(struct crypto_aead *cipher,
|
|
|
|
ctx->enckeylen = keylen;
|
|
ctx->authkeylen = 0;
|
|
- memcpy(ctx->enckey, key, ctx->enckeylen);
|
|
|
|
switch (ctx->enckeylen) {
|
|
case AES_KEYSIZE_128:
|
|
@@ -2946,6 +2945,8 @@ static int aead_gcm_ccm_setkey(struct crypto_aead *cipher,
|
|
goto badkey;
|
|
}
|
|
|
|
+ memcpy(ctx->enckey, key, ctx->enckeylen);
|
|
+
|
|
flow_log(" enckeylen:%u authkeylen:%u\n", ctx->enckeylen,
|
|
ctx->authkeylen);
|
|
flow_dump(" enc: ", ctx->enckey, ctx->enckeylen);
|
|
@@ -3000,6 +3001,10 @@ static int aead_gcm_esp_setkey(struct crypto_aead *cipher,
|
|
struct iproc_ctx_s *ctx = crypto_aead_ctx(cipher);
|
|
|
|
flow_log("%s\n", __func__);
|
|
+
|
|
+ if (keylen < GCM_ESP_SALT_SIZE)
|
|
+ return -EINVAL;
|
|
+
|
|
ctx->salt_len = GCM_ESP_SALT_SIZE;
|
|
ctx->salt_offset = GCM_ESP_SALT_OFFSET;
|
|
memcpy(ctx->salt, key + keylen - GCM_ESP_SALT_SIZE, GCM_ESP_SALT_SIZE);
|
|
@@ -3028,6 +3033,10 @@ static int rfc4543_gcm_esp_setkey(struct crypto_aead *cipher,
|
|
struct iproc_ctx_s *ctx = crypto_aead_ctx(cipher);
|
|
|
|
flow_log("%s\n", __func__);
|
|
+
|
|
+ if (keylen < GCM_ESP_SALT_SIZE)
|
|
+ return -EINVAL;
|
|
+
|
|
ctx->salt_len = GCM_ESP_SALT_SIZE;
|
|
ctx->salt_offset = GCM_ESP_SALT_OFFSET;
|
|
memcpy(ctx->salt, key + keylen - GCM_ESP_SALT_SIZE, GCM_ESP_SALT_SIZE);
|
|
@@ -3057,6 +3066,10 @@ static int aead_ccm_esp_setkey(struct crypto_aead *cipher,
|
|
struct iproc_ctx_s *ctx = crypto_aead_ctx(cipher);
|
|
|
|
flow_log("%s\n", __func__);
|
|
+
|
|
+ if (keylen < CCM_ESP_SALT_SIZE)
|
|
+ return -EINVAL;
|
|
+
|
|
ctx->salt_len = CCM_ESP_SALT_SIZE;
|
|
ctx->salt_offset = CCM_ESP_SALT_OFFSET;
|
|
memcpy(ctx->salt, key + keylen - CCM_ESP_SALT_SIZE, CCM_ESP_SALT_SIZE);
|
|
diff --git a/drivers/crypto/qat/qat_common/qat_algs.c b/drivers/crypto/qat/qat_common/qat_algs.c
|
|
index 1b050391c0c90..02dadcb8852fe 100644
|
|
--- a/drivers/crypto/qat/qat_common/qat_algs.c
|
|
+++ b/drivers/crypto/qat/qat_common/qat_algs.c
|
|
@@ -871,6 +871,11 @@ static int qat_alg_aead_dec(struct aead_request *areq)
|
|
struct icp_qat_fw_la_bulk_req *msg;
|
|
int digst_size = crypto_aead_authsize(aead_tfm);
|
|
int ret, ctr = 0;
|
|
+ u32 cipher_len;
|
|
+
|
|
+ cipher_len = areq->cryptlen - digst_size;
|
|
+ if (cipher_len % AES_BLOCK_SIZE != 0)
|
|
+ return -EINVAL;
|
|
|
|
ret = qat_alg_sgl_to_bufl(ctx->inst, areq->src, areq->dst, qat_req);
|
|
if (unlikely(ret))
|
|
@@ -885,7 +890,7 @@ static int qat_alg_aead_dec(struct aead_request *areq)
|
|
qat_req->req.comn_mid.src_data_addr = qat_req->buf.blp;
|
|
qat_req->req.comn_mid.dest_data_addr = qat_req->buf.bloutp;
|
|
cipher_param = (void *)&qat_req->req.serv_specif_rqpars;
|
|
- cipher_param->cipher_length = areq->cryptlen - digst_size;
|
|
+ cipher_param->cipher_length = cipher_len;
|
|
cipher_param->cipher_offset = areq->assoclen;
|
|
memcpy(cipher_param->u.cipher_IV_array, areq->iv, AES_BLOCK_SIZE);
|
|
auth_param = (void *)((uint8_t *)cipher_param + sizeof(*cipher_param));
|
|
@@ -914,6 +919,9 @@ static int qat_alg_aead_enc(struct aead_request *areq)
|
|
uint8_t *iv = areq->iv;
|
|
int ret, ctr = 0;
|
|
|
|
+ if (areq->cryptlen % AES_BLOCK_SIZE != 0)
|
|
+ return -EINVAL;
|
|
+
|
|
ret = qat_alg_sgl_to_bufl(ctx->inst, areq->src, areq->dst, qat_req);
|
|
if (unlikely(ret))
|
|
return ret;
|
|
diff --git a/drivers/media/usb/usbtv/usbtv-core.c b/drivers/media/usb/usbtv/usbtv-core.c
|
|
index ee9c656d121f1..2308c0b4f5e7e 100644
|
|
--- a/drivers/media/usb/usbtv/usbtv-core.c
|
|
+++ b/drivers/media/usb/usbtv/usbtv-core.c
|
|
@@ -113,7 +113,8 @@ static int usbtv_probe(struct usb_interface *intf,
|
|
|
|
usbtv_audio_fail:
|
|
/* we must not free at this point */
|
|
- usb_get_dev(usbtv->udev);
|
|
+ v4l2_device_get(&usbtv->v4l2_dev);
|
|
+ /* this will undo the v4l2_device_get() */
|
|
usbtv_video_free(usbtv);
|
|
|
|
usbtv_video_fail:
|
|
diff --git a/drivers/staging/comedi/drivers/vmk80xx.c b/drivers/staging/comedi/drivers/vmk80xx.c
|
|
index 65dc6c51037e3..7956abcbae22b 100644
|
|
--- a/drivers/staging/comedi/drivers/vmk80xx.c
|
|
+++ b/drivers/staging/comedi/drivers/vmk80xx.c
|
|
@@ -667,6 +667,9 @@ static int vmk80xx_find_usb_endpoints(struct comedi_device *dev)
|
|
if (!devpriv->ep_rx || !devpriv->ep_tx)
|
|
return -ENODEV;
|
|
|
|
+ if (!usb_endpoint_maxp(devpriv->ep_rx) || !usb_endpoint_maxp(devpriv->ep_tx))
|
|
+ return -EINVAL;
|
|
+
|
|
return 0;
|
|
}
|
|
|
|
diff --git a/drivers/usb/serial/ftdi_sio.c b/drivers/usb/serial/ftdi_sio.c
|
|
index ae98fe94fe91e..01a98d071c7c7 100644
|
|
--- a/drivers/usb/serial/ftdi_sio.c
|
|
+++ b/drivers/usb/serial/ftdi_sio.c
|
|
@@ -1037,6 +1037,11 @@ static const struct usb_device_id id_table_combined[] = {
|
|
/* U-Blox devices */
|
|
{ USB_DEVICE(UBLOX_VID, UBLOX_C099F9P_ZED_PID) },
|
|
{ USB_DEVICE(UBLOX_VID, UBLOX_C099F9P_ODIN_PID) },
|
|
+ /* FreeCalypso USB adapters */
|
|
+ { USB_DEVICE(FTDI_VID, FTDI_FALCONIA_JTAG_BUF_PID),
|
|
+ .driver_info = (kernel_ulong_t)&ftdi_jtag_quirk },
|
|
+ { USB_DEVICE(FTDI_VID, FTDI_FALCONIA_JTAG_UNBUF_PID),
|
|
+ .driver_info = (kernel_ulong_t)&ftdi_jtag_quirk },
|
|
{ } /* Terminating entry */
|
|
};
|
|
|
|
diff --git a/drivers/usb/serial/ftdi_sio_ids.h b/drivers/usb/serial/ftdi_sio_ids.h
|
|
index b5ca17a5967a0..3d47c6d72256e 100644
|
|
--- a/drivers/usb/serial/ftdi_sio_ids.h
|
|
+++ b/drivers/usb/serial/ftdi_sio_ids.h
|
|
@@ -39,6 +39,13 @@
|
|
|
|
#define FTDI_LUMEL_PD12_PID 0x6002
|
|
|
|
+/*
|
|
+ * Custom USB adapters made by Falconia Partners LLC
|
|
+ * for FreeCalypso project, ID codes allocated to Falconia by FTDI.
|
|
+ */
|
|
+#define FTDI_FALCONIA_JTAG_BUF_PID 0x7150
|
|
+#define FTDI_FALCONIA_JTAG_UNBUF_PID 0x7151
|
|
+
|
|
/* Sienna Serial Interface by Secyourit GmbH */
|
|
#define FTDI_SIENNA_PID 0x8348
|
|
|
|
diff --git a/drivers/usb/serial/option.c b/drivers/usb/serial/option.c
|
|
index f7a6ac05ac57a..eb5538a44ee9d 100644
|
|
--- a/drivers/usb/serial/option.c
|
|
+++ b/drivers/usb/serial/option.c
|
|
@@ -528,6 +528,7 @@ static void option_instat_callback(struct urb *urb);
|
|
/* Cellient products */
|
|
#define CELLIENT_VENDOR_ID 0x2692
|
|
#define CELLIENT_PRODUCT_MEN200 0x9005
|
|
+#define CELLIENT_PRODUCT_MPL200 0x9025
|
|
|
|
/* Hyundai Petatel Inc. products */
|
|
#define PETATEL_VENDOR_ID 0x1ff4
|
|
@@ -1186,6 +1187,8 @@ static const struct usb_device_id option_ids[] = {
|
|
.driver_info = NCTRL(2) | RSVD(3) },
|
|
{ USB_DEVICE_INTERFACE_CLASS(TELIT_VENDOR_ID, 0x1053, 0xff), /* Telit FN980 (ECM) */
|
|
.driver_info = NCTRL(0) | RSVD(1) },
|
|
+ { USB_DEVICE_INTERFACE_CLASS(TELIT_VENDOR_ID, 0x1054, 0xff), /* Telit FT980-KS */
|
|
+ .driver_info = NCTRL(2) | RSVD(3) },
|
|
{ USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_ME910),
|
|
.driver_info = NCTRL(0) | RSVD(1) | RSVD(3) },
|
|
{ USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_ME910_DUAL_MODEM),
|
|
@@ -1982,6 +1985,8 @@ static const struct usb_device_id option_ids[] = {
|
|
{ USB_DEVICE_AND_INTERFACE_INFO(MEDIATEK_VENDOR_ID, MEDIATEK_PRODUCT_DC_4COM2, 0xff, 0x02, 0x01) },
|
|
{ USB_DEVICE_AND_INTERFACE_INFO(MEDIATEK_VENDOR_ID, MEDIATEK_PRODUCT_DC_4COM2, 0xff, 0x00, 0x00) },
|
|
{ USB_DEVICE(CELLIENT_VENDOR_ID, CELLIENT_PRODUCT_MEN200) },
|
|
+ { USB_DEVICE(CELLIENT_VENDOR_ID, CELLIENT_PRODUCT_MPL200),
|
|
+ .driver_info = RSVD(1) | RSVD(4) },
|
|
{ USB_DEVICE(PETATEL_VENDOR_ID, PETATEL_PRODUCT_NP10T_600A) },
|
|
{ USB_DEVICE(PETATEL_VENDOR_ID, PETATEL_PRODUCT_NP10T_600E) },
|
|
{ USB_DEVICE_AND_INTERFACE_INFO(TPLINK_VENDOR_ID, TPLINK_PRODUCT_LTE, 0xff, 0x00, 0x00) }, /* TP-Link LTE Module */
|
|
diff --git a/drivers/usb/serial/pl2303.c b/drivers/usb/serial/pl2303.c
|
|
index c5a2995dfa2e3..c0bf7a424d930 100644
|
|
--- a/drivers/usb/serial/pl2303.c
|
|
+++ b/drivers/usb/serial/pl2303.c
|
|
@@ -100,6 +100,7 @@ static const struct usb_device_id id_table[] = {
|
|
{ USB_DEVICE(HP_VENDOR_ID, HP_LD220_PRODUCT_ID) },
|
|
{ USB_DEVICE(HP_VENDOR_ID, HP_LD220TA_PRODUCT_ID) },
|
|
{ USB_DEVICE(HP_VENDOR_ID, HP_LD381_PRODUCT_ID) },
|
|
+ { USB_DEVICE(HP_VENDOR_ID, HP_LD381GC_PRODUCT_ID) },
|
|
{ USB_DEVICE(HP_VENDOR_ID, HP_LD960_PRODUCT_ID) },
|
|
{ USB_DEVICE(HP_VENDOR_ID, HP_LD960TA_PRODUCT_ID) },
|
|
{ USB_DEVICE(HP_VENDOR_ID, HP_LCM220_PRODUCT_ID) },
|
|
diff --git a/drivers/usb/serial/pl2303.h b/drivers/usb/serial/pl2303.h
|
|
index 7d3090ee7e0cb..0f681ddbfd288 100644
|
|
--- a/drivers/usb/serial/pl2303.h
|
|
+++ b/drivers/usb/serial/pl2303.h
|
|
@@ -127,6 +127,7 @@
|
|
|
|
/* Hewlett-Packard POS Pole Displays */
|
|
#define HP_VENDOR_ID 0x03f0
|
|
+#define HP_LD381GC_PRODUCT_ID 0x0183
|
|
#define HP_LM920_PRODUCT_ID 0x026b
|
|
#define HP_TD620_PRODUCT_ID 0x0956
|
|
#define HP_LD960_PRODUCT_ID 0x0b39
|
|
diff --git a/fs/reiserfs/inode.c b/fs/reiserfs/inode.c
|
|
index 1509775da040a..e43fed96704d8 100644
|
|
--- a/fs/reiserfs/inode.c
|
|
+++ b/fs/reiserfs/inode.c
|
|
@@ -1551,11 +1551,7 @@ void reiserfs_read_locked_inode(struct inode *inode,
|
|
* set version 1, version 2 could be used too, because stat data
|
|
* key is the same in both versions
|
|
*/
|
|
- key.version = KEY_FORMAT_3_5;
|
|
- key.on_disk_key.k_dir_id = dirino;
|
|
- key.on_disk_key.k_objectid = inode->i_ino;
|
|
- key.on_disk_key.k_offset = 0;
|
|
- key.on_disk_key.k_type = 0;
|
|
+ _make_cpu_key(&key, KEY_FORMAT_3_5, dirino, inode->i_ino, 0, 0, 3);
|
|
|
|
/* look for the object's stat data */
|
|
retval = search_item(inode->i_sb, &key, &path_to_sd);
|
|
diff --git a/fs/reiserfs/xattr.c b/fs/reiserfs/xattr.c
|
|
index 28b241cd69870..fe63a7c3e0da2 100644
|
|
--- a/fs/reiserfs/xattr.c
|
|
+++ b/fs/reiserfs/xattr.c
|
|
@@ -674,6 +674,13 @@ reiserfs_xattr_get(struct inode *inode, const char *name, void *buffer,
|
|
if (get_inode_sd_version(inode) == STAT_DATA_V1)
|
|
return -EOPNOTSUPP;
|
|
|
|
+ /*
|
|
+ * priv_root needn't be initialized during mount so allow initial
|
|
+ * lookups to succeed.
|
|
+ */
|
|
+ if (!REISERFS_SB(inode->i_sb)->priv_root)
|
|
+ return 0;
|
|
+
|
|
dentry = xattr_lookup(inode, name, XATTR_REPLACE);
|
|
if (IS_ERR(dentry)) {
|
|
err = PTR_ERR(dentry);
|
|
diff --git a/include/net/bluetooth/hci_core.h b/include/net/bluetooth/hci_core.h
|
|
index da3728871e85d..78970afa96f97 100644
|
|
--- a/include/net/bluetooth/hci_core.h
|
|
+++ b/include/net/bluetooth/hci_core.h
|
|
@@ -1402,11 +1402,13 @@ static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
|
|
else
|
|
encrypt = 0x01;
|
|
|
|
- if (conn->sec_level == BT_SECURITY_SDP)
|
|
- conn->sec_level = BT_SECURITY_LOW;
|
|
+ if (!status) {
|
|
+ if (conn->sec_level == BT_SECURITY_SDP)
|
|
+ conn->sec_level = BT_SECURITY_LOW;
|
|
|
|
- if (conn->pending_sec_level > conn->sec_level)
|
|
- conn->sec_level = conn->pending_sec_level;
|
|
+ if (conn->pending_sec_level > conn->sec_level)
|
|
+ conn->sec_level = conn->pending_sec_level;
|
|
+ }
|
|
|
|
mutex_lock(&hci_cb_list_lock);
|
|
list_for_each_entry(cb, &hci_cb_list, list) {
|
|
diff --git a/include/net/bluetooth/l2cap.h b/include/net/bluetooth/l2cap.h
|
|
index 8f1e6a7a2df84..1d1232917de72 100644
|
|
--- a/include/net/bluetooth/l2cap.h
|
|
+++ b/include/net/bluetooth/l2cap.h
|
|
@@ -665,6 +665,8 @@ struct l2cap_ops {
|
|
struct sk_buff *(*alloc_skb) (struct l2cap_chan *chan,
|
|
unsigned long hdr_len,
|
|
unsigned long len, int nb);
|
|
+ int (*filter) (struct l2cap_chan * chan,
|
|
+ struct sk_buff *skb);
|
|
};
|
|
|
|
struct l2cap_conn {
|
|
diff --git a/net/bluetooth/a2mp.c b/net/bluetooth/a2mp.c
|
|
index 26526be579c75..da7fd7c8c2dc0 100644
|
|
--- a/net/bluetooth/a2mp.c
|
|
+++ b/net/bluetooth/a2mp.c
|
|
@@ -226,6 +226,9 @@ static int a2mp_discover_rsp(struct amp_mgr *mgr, struct sk_buff *skb,
|
|
struct a2mp_info_req req;
|
|
|
|
found = true;
|
|
+
|
|
+ memset(&req, 0, sizeof(req));
|
|
+
|
|
req.id = cl->id;
|
|
a2mp_send(mgr, A2MP_GETINFO_REQ, __next_ident(mgr),
|
|
sizeof(req), &req);
|
|
@@ -305,6 +308,8 @@ static int a2mp_getinfo_req(struct amp_mgr *mgr, struct sk_buff *skb,
|
|
if (!hdev || hdev->dev_type != HCI_AMP) {
|
|
struct a2mp_info_rsp rsp;
|
|
|
|
+ memset(&rsp, 0, sizeof(rsp));
|
|
+
|
|
rsp.id = req->id;
|
|
rsp.status = A2MP_STATUS_INVALID_CTRL_ID;
|
|
|
|
@@ -348,6 +353,8 @@ static int a2mp_getinfo_rsp(struct amp_mgr *mgr, struct sk_buff *skb,
|
|
if (!ctrl)
|
|
return -ENOMEM;
|
|
|
|
+ memset(&req, 0, sizeof(req));
|
|
+
|
|
req.id = rsp->id;
|
|
a2mp_send(mgr, A2MP_GETAMPASSOC_REQ, __next_ident(mgr), sizeof(req),
|
|
&req);
|
|
@@ -376,6 +383,8 @@ static int a2mp_getampassoc_req(struct amp_mgr *mgr, struct sk_buff *skb,
|
|
struct a2mp_amp_assoc_rsp rsp;
|
|
rsp.id = req->id;
|
|
|
|
+ memset(&rsp, 0, sizeof(rsp));
|
|
+
|
|
if (tmp) {
|
|
rsp.status = A2MP_STATUS_COLLISION_OCCURED;
|
|
amp_mgr_put(tmp);
|
|
@@ -464,7 +473,6 @@ static int a2mp_createphyslink_req(struct amp_mgr *mgr, struct sk_buff *skb,
|
|
struct a2mp_cmd *hdr)
|
|
{
|
|
struct a2mp_physlink_req *req = (void *) skb->data;
|
|
-
|
|
struct a2mp_physlink_rsp rsp;
|
|
struct hci_dev *hdev;
|
|
struct hci_conn *hcon;
|
|
@@ -475,6 +483,8 @@ static int a2mp_createphyslink_req(struct amp_mgr *mgr, struct sk_buff *skb,
|
|
|
|
BT_DBG("local_id %d, remote_id %d", req->local_id, req->remote_id);
|
|
|
|
+ memset(&rsp, 0, sizeof(rsp));
|
|
+
|
|
rsp.local_id = req->remote_id;
|
|
rsp.remote_id = req->local_id;
|
|
|
|
@@ -553,6 +563,8 @@ static int a2mp_discphyslink_req(struct amp_mgr *mgr, struct sk_buff *skb,
|
|
|
|
BT_DBG("local_id %d remote_id %d", req->local_id, req->remote_id);
|
|
|
|
+ memset(&rsp, 0, sizeof(rsp));
|
|
+
|
|
rsp.local_id = req->remote_id;
|
|
rsp.remote_id = req->local_id;
|
|
rsp.status = A2MP_STATUS_SUCCESS;
|
|
@@ -675,6 +687,8 @@ static int a2mp_chan_recv_cb(struct l2cap_chan *chan, struct sk_buff *skb)
|
|
if (err) {
|
|
struct a2mp_cmd_rej rej;
|
|
|
|
+ memset(&rej, 0, sizeof(rej));
|
|
+
|
|
rej.reason = cpu_to_le16(0);
|
|
hdr = (void *) skb->data;
|
|
|
|
@@ -898,6 +912,8 @@ void a2mp_send_getinfo_rsp(struct hci_dev *hdev)
|
|
|
|
BT_DBG("%s mgr %p", hdev->name, mgr);
|
|
|
|
+ memset(&rsp, 0, sizeof(rsp));
|
|
+
|
|
rsp.id = hdev->id;
|
|
rsp.status = A2MP_STATUS_INVALID_CTRL_ID;
|
|
|
|
@@ -995,6 +1011,8 @@ void a2mp_send_create_phy_link_rsp(struct hci_dev *hdev, u8 status)
|
|
if (!mgr)
|
|
return;
|
|
|
|
+ memset(&rsp, 0, sizeof(rsp));
|
|
+
|
|
hs_hcon = hci_conn_hash_lookup_state(hdev, AMP_LINK, BT_CONNECT);
|
|
if (!hs_hcon) {
|
|
rsp.status = A2MP_STATUS_UNABLE_START_LINK_CREATION;
|
|
@@ -1027,6 +1045,8 @@ void a2mp_discover_amp(struct l2cap_chan *chan)
|
|
|
|
mgr->bredr_chan = chan;
|
|
|
|
+ memset(&req, 0, sizeof(req));
|
|
+
|
|
req.mtu = cpu_to_le16(L2CAP_A2MP_DEFAULT_MTU);
|
|
req.ext_feat = 0;
|
|
a2mp_send(mgr, A2MP_DISCOVER_REQ, 1, sizeof(req), &req);
|
|
diff --git a/net/bluetooth/hci_conn.c b/net/bluetooth/hci_conn.c
|
|
index 307800fd18e6d..b99b5c6de55ab 100644
|
|
--- a/net/bluetooth/hci_conn.c
|
|
+++ b/net/bluetooth/hci_conn.c
|
|
@@ -1323,6 +1323,23 @@ int hci_conn_check_link_mode(struct hci_conn *conn)
|
|
return 0;
|
|
}
|
|
|
|
+ /* AES encryption is required for Level 4:
|
|
+ *
|
|
+ * BLUETOOTH CORE SPECIFICATION Version 5.2 | Vol 3, Part C
|
|
+ * page 1319:
|
|
+ *
|
|
+ * 128-bit equivalent strength for link and encryption keys
|
|
+ * required using FIPS approved algorithms (E0 not allowed,
|
|
+ * SAFER+ not allowed, and P-192 not allowed; encryption key
|
|
+ * not shortened)
|
|
+ */
|
|
+ if (conn->sec_level == BT_SECURITY_FIPS &&
|
|
+ !test_bit(HCI_CONN_AES_CCM, &conn->flags)) {
|
|
+ bt_dev_err(conn->hdev,
|
|
+ "Invalid security: Missing AES-CCM usage");
|
|
+ return 0;
|
|
+ }
|
|
+
|
|
if (hci_conn_ssp_enabled(conn) &&
|
|
!test_bit(HCI_CONN_ENCRYPT, &conn->flags))
|
|
return 0;
|
|
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
|
|
index 6c6c9a81bee2c..ff38f98988db8 100644
|
|
--- a/net/bluetooth/hci_event.c
|
|
+++ b/net/bluetooth/hci_event.c
|
|
@@ -3068,27 +3068,23 @@ static void hci_encrypt_change_evt(struct hci_dev *hdev, struct sk_buff *skb)
|
|
|
|
clear_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags);
|
|
|
|
+ /* Check link security requirements are met */
|
|
+ if (!hci_conn_check_link_mode(conn))
|
|
+ ev->status = HCI_ERROR_AUTH_FAILURE;
|
|
+
|
|
if (ev->status && conn->state == BT_CONNECTED) {
|
|
if (ev->status == HCI_ERROR_PIN_OR_KEY_MISSING)
|
|
set_bit(HCI_CONN_AUTH_FAILURE, &conn->flags);
|
|
|
|
+ /* Notify upper layers so they can cleanup before
|
|
+ * disconnecting.
|
|
+ */
|
|
+ hci_encrypt_cfm(conn, ev->status);
|
|
hci_disconnect(conn, HCI_ERROR_AUTH_FAILURE);
|
|
hci_conn_drop(conn);
|
|
goto unlock;
|
|
}
|
|
|
|
- /* In Secure Connections Only mode, do not allow any connections
|
|
- * that are not encrypted with AES-CCM using a P-256 authenticated
|
|
- * combination key.
|
|
- */
|
|
- if (hci_dev_test_flag(hdev, HCI_SC_ONLY) &&
|
|
- (!test_bit(HCI_CONN_AES_CCM, &conn->flags) ||
|
|
- conn->key_type != HCI_LK_AUTH_COMBINATION_P256)) {
|
|
- hci_connect_cfm(conn, HCI_ERROR_AUTH_FAILURE);
|
|
- hci_conn_drop(conn);
|
|
- goto unlock;
|
|
- }
|
|
-
|
|
/* Try reading the encryption key size for encrypted ACL links */
|
|
if (!ev->status && ev->encrypt && conn->type == ACL_LINK) {
|
|
struct hci_cp_read_enc_key_size cp;
|
|
diff --git a/net/bluetooth/l2cap_core.c b/net/bluetooth/l2cap_core.c
|
|
index fe913a5c754a8..129cbef8e5605 100644
|
|
--- a/net/bluetooth/l2cap_core.c
|
|
+++ b/net/bluetooth/l2cap_core.c
|
|
@@ -7302,9 +7302,10 @@ static int l2cap_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb)
|
|
goto drop;
|
|
}
|
|
|
|
- if ((chan->mode == L2CAP_MODE_ERTM ||
|
|
- chan->mode == L2CAP_MODE_STREAMING) && sk_filter(chan->data, skb))
|
|
- goto drop;
|
|
+ if (chan->ops->filter) {
|
|
+ if (chan->ops->filter(chan, skb))
|
|
+ goto drop;
|
|
+ }
|
|
|
|
if (!control->sframe) {
|
|
int err;
|
|
diff --git a/net/bluetooth/l2cap_sock.c b/net/bluetooth/l2cap_sock.c
|
|
index a995d2c51fa7f..c7fc28a465fdb 100644
|
|
--- a/net/bluetooth/l2cap_sock.c
|
|
+++ b/net/bluetooth/l2cap_sock.c
|
|
@@ -1663,6 +1663,19 @@ static void l2cap_sock_suspend_cb(struct l2cap_chan *chan)
|
|
sk->sk_state_change(sk);
|
|
}
|
|
|
|
+static int l2cap_sock_filter(struct l2cap_chan *chan, struct sk_buff *skb)
|
|
+{
|
|
+ struct sock *sk = chan->data;
|
|
+
|
|
+ switch (chan->mode) {
|
|
+ case L2CAP_MODE_ERTM:
|
|
+ case L2CAP_MODE_STREAMING:
|
|
+ return sk_filter(sk, skb);
|
|
+ }
|
|
+
|
|
+ return 0;
|
|
+}
|
|
+
|
|
static const struct l2cap_ops l2cap_chan_ops = {
|
|
.name = "L2CAP Socket Interface",
|
|
.new_connection = l2cap_sock_new_connection_cb,
|
|
@@ -1678,6 +1691,7 @@ static const struct l2cap_ops l2cap_chan_ops = {
|
|
.get_sndtimeo = l2cap_sock_get_sndtimeo_cb,
|
|
.get_peer_pid = l2cap_sock_get_peer_pid_cb,
|
|
.alloc_skb = l2cap_sock_alloc_skb_cb,
|
|
+ .filter = l2cap_sock_filter,
|
|
};
|
|
|
|
static void l2cap_sock_destruct(struct sock *sk)
|
|
diff --git a/net/bluetooth/mgmt.c b/net/bluetooth/mgmt.c
|
|
index 9e8a3cccc6ca3..9bcba7eff4bd3 100644
|
|
--- a/net/bluetooth/mgmt.c
|
|
+++ b/net/bluetooth/mgmt.c
|
|
@@ -766,7 +766,8 @@ static u32 get_supported_settings(struct hci_dev *hdev)
|
|
|
|
if (lmp_ssp_capable(hdev)) {
|
|
settings |= MGMT_SETTING_SSP;
|
|
- settings |= MGMT_SETTING_HS;
|
|
+ if (IS_ENABLED(CONFIG_BT_HS))
|
|
+ settings |= MGMT_SETTING_HS;
|
|
}
|
|
|
|
if (lmp_sc_capable(hdev))
|
|
@@ -1794,6 +1795,10 @@ static int set_hs(struct sock *sk, struct hci_dev *hdev, void *data, u16 len)
|
|
|
|
bt_dev_dbg(hdev, "sock %p", sk);
|
|
|
|
+ if (!IS_ENABLED(CONFIG_BT_HS))
|
|
+ return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_HS,
|
|
+ MGMT_STATUS_NOT_SUPPORTED);
|
|
+
|
|
status = mgmt_bredr_support(hdev);
|
|
if (status)
|
|
return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_HS, status);
|