Skip to content

[PW_SID:1104221] Bluetooth: hci_h5: reset hci_uart::priv in the close() method#270

Open
BluezTestBot wants to merge 1 commit into
workflowfrom
1104221
Open

[PW_SID:1104221] Bluetooth: hci_h5: reset hci_uart::priv in the close() method#270
BluezTestBot wants to merge 1 commit into
workflowfrom
1104221

Conversation

@BluezTestBot
Copy link
Copy Markdown

Unlike the other HCI UART drivers, the 3-wire UART driver doesn't reset
hci_uart::priv in its close() method -- this shouldn't pose a problem as
all the methods in struct hci_uart_proto should only be called after the
open() method that sets up hci_uart::priv properly. However, it seems wise
to be more consistent and provide for the struct hci_uart_proto methods
the same state that exists before the first open() method call (so that
they rather crash than dereference a stale hci_uart::priv pointer)...

Found by Linux Verification Center (linuxtesting.org) with the Svace static
analysis tool.

Signed-off-by: Sergey Shtylyov s.shtylyov@auroraos.dev


The patch is against the master branch of the bluetooth-next.git repo.

drivers/bluetooth/hci_h5.c | 1 +
1 file changed, 1 insertion(+)

Unlike the other HCI UART drivers, the 3-wire UART driver doesn't reset
hci_uart::priv in its close() method -- this shouldn't pose a problem as
all the methods in *struct* hci_uart_proto should only be called after the
open() method that sets up hci_uart::priv properly. However, it seems wise
to be more consistent and provide for the *struct* hci_uart_proto methods
the same state that exists before the first open() method call (so that
they rather crash than dereference a stale hci_uart::priv pointer)...

Found by Linux Verification Center (linuxtesting.org) with the Svace static
analysis tool.

Signed-off-by: Sergey Shtylyov <s.shtylyov@auroraos.dev>
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 1, 2026

CheckPatch
Desc: Run checkpatch.pl script
Duration: 0.59 seconds
Result: PASS

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 1, 2026

VerifyFixes
Desc: Verify Fixes tag format and validity
Duration: 0.09 seconds
Result: PASS

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 1, 2026

VerifySignedoff
Desc: Verify Signed-off-by chain
Duration: 0.09 seconds
Result: PASS

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 1, 2026

GitLint
Desc: Run gitlint
Duration: 0.24 seconds
Result: PASS

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 1, 2026

SubjectPrefix
Desc: Check subject contains "Bluetooth" prefix
Duration: 0.08 seconds
Result: PASS

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 1, 2026

BuildKernel
Desc: Build Kernel for Bluetooth
Duration: 25.29 seconds
Result: PASS

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 1, 2026

CheckAllWarning
Desc: Run linux kernel with all warning enabled
Duration: 27.74 seconds
Result: PASS

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 1, 2026

CheckSparse
Desc: Run sparse tool with linux kernel
Duration: 26.86 seconds
Result: PASS

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 1, 2026

BuildKernel32
Desc: Build 32bit Kernel for Bluetooth
Duration: 24.91 seconds
Result: PASS

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 1, 2026

TestRunnerSetup
Desc: Setup kernel and bluez for test-runner
Duration: 540.54 seconds
Result: PASS

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 1, 2026

IncrementalBuild
Desc: Incremental build with the patches in the series
Duration: 24.70 seconds
Result: PASS

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant