)]}' { "log": [ { "commit": "eb688f6a4b6090dbcdccc935cf074618c0f421c1", "tree": "a250da8a12592fdb19ec3cf27e52b8ba6ed11abb", "parents": [ "bc96ff59b2f19e924d9e15e24cee19723d674b92" ], "author": { "name": "Syam Sidhardhan", "email": "s.syam@samsung.com", "time": "Thu Apr 12 20:33:17 2012 +0530" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Jul 09 10:51:20 2014 -0700" }, "message": "Bluetooth: Remove unused hci_le_ltk_reply()\n\ncommit e10b9969f217c948c5523045f44eba4d3a758ff0 upstream.\n\nIn this API, we were using sizeof operator for an array\ngiven as function argument, which is invalid.\nHowever this API is not used anywhere.\n\nSigned-off-by: Syam Sidhardhan \u003cs.syam@samsung.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo@padovan.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "bc96ff59b2f19e924d9e15e24cee19723d674b92", "tree": "84f5c69c5c998fb74abcb4afda396184df294a4b", "parents": [ "1dbae5d755c36ab7932f9282ff146cf1fe698ade" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Mon Jun 09 13:58:14 2014 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Jul 09 10:51:20 2014 -0700" }, "message": "Bluetooth: Fix SSP acceptor just-works confirmation without MITM\n\ncommit ba15a58b179ed76a7e887177f2b06de12c58ec8f upstream.\n\nFrom the Bluetooth Core Specification 4.1 page 1958:\n\n\"if both devices have set the Authentication_Requirements parameter to\none of the MITM Protection Not Required options, authentication stage 1\nshall function as if both devices set their IO capabilities to\nDisplayOnly (e.g., Numeric comparison with automatic confirmation on\nboth devices)\"\n\nSo far our implementation has done user confirmation for all just-works\ncases regardless of the MITM requirements, however following the\nspecification to the word means that we should not be doing confirmation\nwhen neither side has the MITM flag set.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nTested-by: Szymon Janc \u003cszymon.janc@tieto.com\u003e\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "6ec88fcb4aa2c33fe2fe2a23c576a7e2581c5c3d", "tree": "0fdb1d8f16b57d2a2b8849e70a8146fa2d3fdad0", "parents": [ "ade988a989901a1527c6809aeea0ca3b8639af46" ], "author": { "name": "Jaganath Kanakkassery", "email": "jaganath.k@samsung.com", "time": "Fri Jun 21 19:55:11 2013 +0530" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Jun 11 12:04:13 2014 -0700" }, "message": "Bluetooth: Fix invalid length check in l2cap_information_rsp()\n\ncommit 3f6fa3d489e127ca5a5b298eabac3ff5dbe0e112 upstream.\n\nThe length check is invalid since the length varies with type of\ninfo response.\n\nThis was introduced by the commit cb3b3152b2f5939d67005cff841a1ca748b19888\n\nBecause of this, l2cap info rsp is not handled and command reject is sent.\n\n\u003e ACL data: handle 11 flags 0x02 dlen 16\n L2CAP(s): Info rsp: type 2 result 0\n Extended feature mask 0x00b8\n Enhanced Retransmission mode\n Streaming mode\n FCS Option\n Fixed Channels\n\u003c ACL data: handle 11 flags 0x00 dlen 10\n L2CAP(s): Command rej: reason 0\n Command not understood\n\nCc: stable@vger.kernel.org\nSigned-off-by: Jaganath Kanakkassery \u003cjaganath.k@samsung.com\u003e\nSigned-off-by: Chan-Yeol Park \u003cchanyeol.park@samsung.com\u003e\nAcked-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nCc: Jianguo Wu \u003cwujianguo@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "ade988a989901a1527c6809aeea0ca3b8639af46", "tree": "4396fac8dfbd933084d060e7e9cb61c37f4e7c72", "parents": [ "653b6fe704e344fe48162a23b60657db1ac84233" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Tue May 28 13:46:30 2013 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Jun 11 12:04:13 2014 -0700" }, "message": "Bluetooth: Fix missing length checks for L2CAP signalling PDUs\n\ncommit cb3b3152b2f5939d67005cff841a1ca748b19888 upstream.\n\nThere has been code in place to check that the L2CAP length header\nmatches the amount of data received, but many PDU handlers have not been\nchecking that the data received actually matches that expected by the\nspecific PDU. This patch adds passing the length header to the specific\nhandler functions and ensures that those functions fail cleanly in the\ncase of an incorrect amount of data.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n[bwh: Backported to 3.2:\n - Adjust context\n - Move uses of *req below the new check in l2cap_connect_req]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\n[wujg: Backported to 3.4:\n - Adjust context\n - Adjust l2cap_create_channel_rsp()\u0027s parameters]\nSigned-off-by: Jianguo Wu \u003cwujianguo@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "dfb81e8ae6f25dcca2c93d1f6cdaaf89ef5dd047", "tree": "05cc784faa63d69ab3a4ea6c706a3a7a0aba30da", "parents": [ "eea7ead860ea8622d2d4b1cfbd63649beed91a9b" ], "author": { "name": "Claudio Takahasi", "email": "claudio.takahasi@openbossa.org", "time": "Thu Jul 25 16:34:24 2013 -0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sat Apr 26 17:13:19 2014 -0700" }, "message": "Bluetooth: Fix removing Long Term Key\n\ncommit 5981a8821b774ada0be512fd9bad7c241e17657e upstream.\n\nThis patch fixes authentication failure on LE link re-connection when\nBlueZ acts as slave (peripheral). LTK is removed from the internal list\nafter its first use causing PIN or Key missing reply when re-connecting\nthe link. The LE Long Term Key Request event indicates that the master\nis attempting to encrypt or re-encrypt the link.\n\nPre-condition: BlueZ host paired and running as slave.\nHow to reproduce(master):\n\n 1) Establish an ACL LE encrypted link\n 2) Disconnect the link\n 3) Try to re-establish the ACL LE encrypted link (fails)\n\n\u003e HCI Event: LE Meta Event (0x3e) plen 19\n LE Connection Complete (0x01)\n Status: Success (0x00)\n Handle: 64\n Role: Slave (0x01)\n...\n@ Device Connected: 00:02:72:DC:29:C9 (1) flags 0x0000\n\u003e HCI Event: LE Meta Event (0x3e) plen 13\n LE Long Term Key Request (0x05)\n Handle: 64\n Random number: 875be18439d9aa37\n Encryption diversifier: 0x76ed\n\u003c HCI Command: LE Long Term Key Request Reply (0x08|0x001a) plen 18\n Handle: 64\n Long term key: 2aa531db2fce9f00a0569c7d23d17409\n\u003e HCI Event: Command Complete (0x0e) plen 6\n LE Long Term Key Request Reply (0x08|0x001a) ncmd 1\n Status: Success (0x00)\n Handle: 64\n\u003e HCI Event: Encryption Change (0x08) plen 4\n Status: Success (0x00)\n Handle: 64\n Encryption: Enabled with AES-CCM (0x01)\n...\n@ Device Disconnected: 00:02:72:DC:29:C9 (1) reason 3\n\u003c HCI Command: LE Set Advertise Enable (0x08|0x000a) plen 1\n Advertising: Enabled (0x01)\n\u003e HCI Event: Command Complete (0x0e) plen 4\n LE Set Advertise Enable (0x08|0x000a) ncmd 1\n Status: Success (0x00)\n\u003e HCI Event: LE Meta Event (0x3e) plen 19\n LE Connection Complete (0x01)\n Status: Success (0x00)\n Handle: 64\n Role: Slave (0x01)\n...\n@ Device Connected: 00:02:72:DC:29:C9 (1) flags 0x0000\n\u003e HCI Event: LE Meta Event (0x3e) plen 13\n LE Long Term Key Request (0x05)\n Handle: 64\n Random number: 875be18439d9aa37\n Encryption diversifier: 0x76ed\n\u003c HCI Command: LE Long Term Key Request Neg Reply (0x08|0x001b) plen 2\n Handle: 64\n\u003e HCI Event: Command Complete (0x0e) plen 6\n LE Long Term Key Request Neg Reply (0x08|0x001b) ncmd 1\n Status: Success (0x00)\n Handle: 64\n\u003e HCI Event: Disconnect Complete (0x05) plen 4\n Status: Success (0x00)\n Handle: 64\n Reason: Authentication Failure (0x05)\n@ Device Disconnected: 00:02:72:DC:29:C9 (1) reason 0\n\nSigned-off-by: Claudio Takahasi \u003cclaudio.takahasi@openbossa.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "18719a4c7a90af3de4bb071511dd4a6dcf61a2e0", "tree": "8a2a831db542446ee13ec1d9ec8d484ecbb72843", "parents": [ "11afb94fbe0337a06ee7fce36841969b4e538622" ], "author": { "name": "Hannes Frederic Sowa", "email": "hannes@stressinduktion.org", "time": "Thu Nov 21 03:14:22 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sun Dec 08 07:29:41 2013 -0800" }, "message": "net: rework recvmsg handler msg_name and msg_namelen logic\n\n[ Upstream commit f3d3342602f8bcbf37d7c46641cb9bca7618eb1c ]\n\nThis patch now always passes msg-\u003emsg_namelen as 0. recvmsg handlers must\nset msg_namelen to the proper size \u003c\u003d sizeof(struct sockaddr_storage)\nto return msg_name to the user.\n\nThis prevents numerous uninitialized memory leaks we had in the\nrecvmsg handlers and makes it harder for new code to accidentally leak\nuninitialized memory.\n\nOptimize for the case recvfrom is called with NULL as address. We don\u0027t\nneed to copy the address at all, so set it to NULL before invoking the\nrecvmsg handler. We can do so, because all the recvmsg handlers must\ncope with the case a plain read() is called on them. read() also sets\nmsg_name to NULL.\n\nAlso document these changes in include/linux/net.h as suggested by David\nMiller.\n\nChanges since RFC:\n\nSet msg-\u003emsg_name \u003d NULL if user specified a NULL in msg_name but had a\nnon-null msg_namelen in verify_iovec/verify_compat_iovec. This doesn\u0027t\naffect sendto as it would bail out earlier while trying to copy-in the\naddress. It also more naturally reflects the logic by the callers of\nverify_iovec.\n\nWith this change in place I could remove \"\nif (!uaddr || msg_sys-\u003emsg_namelen \u003d\u003d 0)\n\tmsg-\u003emsg_name \u003d NULL\n\".\n\nThis change does not alter the user visible error logic as we ignore\nmsg_namelen as long as msg_name is NULL.\n\nAlso remove two unnecessary curly brackets in ___sys_recvmsg and change\ncomments to netdev style.\n\nCc: David Miller \u003cdavem@davemloft.net\u003e\nSuggested-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: Hannes Frederic Sowa \u003channes@stressinduktion.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "aa33f22e3679f2dfc352a77089c11daa33db1e5b", "tree": "76e229fc773c9f61d471143c097b4712bb2d3557", "parents": [ "ae63544e0e99b722cac42e7ba0b75df6f28f9a0e" ], "author": { "name": "Andre Guedes", "email": "andre.guedes@openbossa.org", "time": "Wed Jul 31 16:25:29 2013 -0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sun Oct 13 15:42:48 2013 -0700" }, "message": "Bluetooth: Fix encryption key size for peripheral role\n\ncommit 89cbb4da0abee2f39d75f67f9fd57f7410c8b65c upstream.\n\nThis patch fixes the connection encryption key size information when\nthe host is playing the peripheral role. We should set conn-\u003eenc_key_\nsize in hci_le_ltk_request_evt, otherwise it is left uninitialized.\n\nSigned-off-by: Andre Guedes \u003candre.guedes@openbossa.org\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "ae63544e0e99b722cac42e7ba0b75df6f28f9a0e", "tree": "e98a7212775b6664c038b46ad8dcde524e9caef0", "parents": [ "77ddd59bbeb05825ee5126d128a31a0c6b461255" ], "author": { "name": "Andre Guedes", "email": "andre.guedes@openbossa.org", "time": "Wed Jul 31 16:25:28 2013 -0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sun Oct 13 15:42:48 2013 -0700" }, "message": "Bluetooth: Fix security level for peripheral role\n\ncommit f8776218e8546397be64ad2bc0ebf4748522d6e3 upstream.\n\nWhile playing the peripheral role, the host gets a LE Long Term Key\nRequest Event from the controller when a connection is established\nwith a bonded device. The host then informs the LTK which should be\nused for the connection. Once the link is encrypted, the host gets\nan Encryption Change Event.\n\nTherefore we should set conn-\u003epending_sec_level instead of conn-\u003e\nsec_level in hci_le_ltk_request_evt. This way, conn-\u003esec_level is\nproperly updated in hci_encrypt_change_evt.\n\nMoreover, since we have a LTK associated to the device, we have at\nleast BT_SECURITY_MEDIUM security level.\n\nSigned-off-by: Andre Guedes \u003candre.guedes@openbossa.org\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "630493e2e96ab876b8085a3352e255d2f56be75c", "tree": "12667689dc7870a0ca8b0225fb984724f303ffeb", "parents": [ "a5f9dc0a79f24b79ed088d910c0fa3c30f52e305" ], "author": { "name": "Anderson Lizardo", "email": "anderson.lizardo@openbossa.org", "time": "Sun Jun 02 16:30:40 2013 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Jul 03 10:59:00 2013 -0700" }, "message": "Bluetooth: Fix crash in l2cap_build_cmd() with small MTU\n\ncommit 300b962e5244a1ea010df7e88595faa0085b461d upstream.\n\nIf a too small MTU value is set with ioctl(HCISETACLMTU) or by a bogus\ncontroller, memory corruption happens due to a memcpy() call with\nnegative length.\n\nFix this crash on either incoming or outgoing connections with a MTU\nsmaller than L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE:\n\n[ 46.885433] BUG: unable to handle kernel paging request at f56ad000\n[ 46.888037] IP: [\u003cc03d94cd\u003e] memcpy+0x1d/0x40\n[ 46.888037] *pdpt \u003d 0000000000ac3001 *pde \u003d 00000000373f8067 *pte \u003d 80000000356ad060\n[ 46.888037] Oops: 0002 [#1] SMP DEBUG_PAGEALLOC\n[ 46.888037] Modules linked in: hci_vhci bluetooth virtio_balloon i2c_piix4 uhci_hcd usbcore usb_common\n[ 46.888037] CPU: 0 PID: 1044 Comm: kworker/u3:0 Not tainted 3.10.0-rc1+ #12\n[ 46.888037] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007\n[ 46.888037] Workqueue: hci0 hci_rx_work [bluetooth]\n[ 46.888037] task: f59b15b0 ti: f55c4000 task.ti: f55c4000\n[ 46.888037] EIP: 0060:[\u003cc03d94cd\u003e] EFLAGS: 00010212 CPU: 0\n[ 46.888037] EIP is at memcpy+0x1d/0x40\n[ 46.888037] EAX: f56ac1c0 EBX: fffffff8 ECX: 3ffffc6e EDX: f55c5cf2\n[ 46.888037] ESI: f55c6b32 EDI: f56ad000 EBP: f55c5c68 ESP: f55c5c5c\n[ 46.888037] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068\n[ 46.888037] CR0: 8005003b CR2: f56ad000 CR3: 3557d000 CR4: 000006f0\n[ 46.888037] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000\n[ 46.888037] DR6: ffff0ff0 DR7: 00000400\n[ 46.888037] Stack:\n[ 46.888037] fffffff8 00000010 00000003 f55c5cac f8c6a54c ffffffff f8c69eb2 00000000\n[ 46.888037] f4783cdc f57f0070 f759c590 1001c580 00000003 0200000a 00000000 f5a88560\n[ 46.888037] f5ba2600 f5a88560 00000041 00000000 f55c5d90 f8c6f4c7 00000008 f55c5cf2\n[ 46.888037] Call Trace:\n[ 46.888037] [\u003cf8c6a54c\u003e] l2cap_send_cmd+0x1cc/0x230 [bluetooth]\n[ 46.888037] [\u003cf8c69eb2\u003e] ? l2cap_global_chan_by_psm+0x152/0x1a0 [bluetooth]\n[ 46.888037] [\u003cf8c6f4c7\u003e] l2cap_connect+0x3f7/0x540 [bluetooth]\n[ 46.888037] [\u003cc019b37b\u003e] ? trace_hardirqs_off+0xb/0x10\n[ 46.888037] [\u003cc01a0ff8\u003e] ? mark_held_locks+0x68/0x110\n[ 46.888037] [\u003cc064ad20\u003e] ? mutex_lock_nested+0x280/0x360\n[ 46.888037] [\u003cc064b9d9\u003e] ? __mutex_unlock_slowpath+0xa9/0x150\n[ 46.888037] [\u003cc01a118c\u003e] ? trace_hardirqs_on_caller+0xec/0x1b0\n[ 46.888037] [\u003cc064ad08\u003e] ? mutex_lock_nested+0x268/0x360\n[ 46.888037] [\u003cc01a125b\u003e] ? trace_hardirqs_on+0xb/0x10\n[ 46.888037] [\u003cf8c72f8d\u003e] l2cap_recv_frame+0xb2d/0x1d30 [bluetooth]\n[ 46.888037] [\u003cc01a0ff8\u003e] ? mark_held_locks+0x68/0x110\n[ 46.888037] [\u003cc064b9d9\u003e] ? __mutex_unlock_slowpath+0xa9/0x150\n[ 46.888037] [\u003cc01a118c\u003e] ? trace_hardirqs_on_caller+0xec/0x1b0\n[ 46.888037] [\u003cf8c754f1\u003e] l2cap_recv_acldata+0x2a1/0x320 [bluetooth]\n[ 46.888037] [\u003cf8c491d8\u003e] hci_rx_work+0x518/0x810 [bluetooth]\n[ 46.888037] [\u003cf8c48df2\u003e] ? hci_rx_work+0x132/0x810 [bluetooth]\n[ 46.888037] [\u003cc0158979\u003e] process_one_work+0x1a9/0x600\n[ 46.888037] [\u003cc01588fb\u003e] ? process_one_work+0x12b/0x600\n[ 46.888037] [\u003cc015922e\u003e] ? worker_thread+0x19e/0x320\n[ 46.888037] [\u003cc015922e\u003e] ? worker_thread+0x19e/0x320\n[ 46.888037] [\u003cc0159187\u003e] worker_thread+0xf7/0x320\n[ 46.888037] [\u003cc0159090\u003e] ? rescuer_thread+0x290/0x290\n[ 46.888037] [\u003cc01602f8\u003e] kthread+0xa8/0xb0\n[ 46.888037] [\u003cc0656777\u003e] ret_from_kernel_thread+0x1b/0x28\n[ 46.888037] [\u003cc0160250\u003e] ? flush_kthread_worker+0x120/0x120\n[ 46.888037] Code: c3 90 8d 74 26 00 e8 63 fc ff ff eb e8 90 55 89 e5 83 ec 0c 89 5d f4 89 75 f8 89 7d fc 3e 8d 74 26 00 89 cb 89 c7 c1 e9 02 89 d6 \u003cf3\u003e a5 89 d9 83 e1 03 74 02 f3 a4 8b 5d f4 8b 75 f8 8b 7d fc 89\n[ 46.888037] EIP: [\u003cc03d94cd\u003e] memcpy+0x1d/0x40 SS:ESP 0068:f55c5c5c\n[ 46.888037] CR2: 00000000f56ad000\n[ 46.888037] ---[ end trace 0217c1f4d78714a9 ]---\n\nSigned-off-by: Anderson Lizardo \u003canderson.lizardo@openbossa.org\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "2147439889d33148785d20cdff01491f5617965f", "tree": "1f2504a3535c3e534b040cc66f002bb43e41c7e3", "parents": [ "b507d034be0418dd2dee4fe3d40f389b1818b37a" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Wed May 29 09:51:29 2013 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Jun 20 11:58:44 2013 -0700" }, "message": "Bluetooth: Fix mgmt handling of power on failures\n\ncommit 96570ffcca0b872dc8626e97569d2697f374d868 upstream.\n\nIf hci_dev_open fails we need to ensure that the corresponding\nmgmt_set_powered command gets an appropriate response. This patch fixes\nthe missing response by adding a new mgmt_set_powered_failed function\nthat\u0027s used to indicate a power on failure to mgmt. Since a situation\nwith the device being rfkilled may require special handling in user\nspace the patch uses a new dedicated mgmt status code for this.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "2d97f68d03180ad0a47fdb7c02f0fecdac9ad9a7", "tree": "a6e89fe7325ebee91833c2c967f3e493e33bdf43", "parents": [ "a776cc3f3ae0b7d0f6137f4dc98470e3d4bb52d0" ], "author": { "name": "Mathias Krause", "email": "minipli@googlemail.com", "time": "Sun Apr 07 01:51:50 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed May 01 09:41:04 2013 -0700" }, "message": "Bluetooth: RFCOMM - Fix missing msg_namelen update in rfcomm_sock_recvmsg()\n\n[ Upstream commit e11e0455c0d7d3d62276a0c55d9dfbc16779d691 ]\n\nIf RFCOMM_DEFER_SETUP is set in the flags, rfcomm_sock_recvmsg() returns\nearly with 0 without updating the possibly set msg_namelen member. This,\nin turn, leads to a 128 byte kernel stack leak in net/socket.c.\n\nFix this by updating msg_namelen in this case. For all other cases it\nwill be handled in bt_sock_stream_recvmsg().\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nCc: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nCc: Gustavo Padovan \u003cgustavo@padovan.org\u003e\nCc: Johan Hedberg \u003cjohan.hedberg@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "a776cc3f3ae0b7d0f6137f4dc98470e3d4bb52d0", "tree": "f9d1b0c839e9c1fef99b4d99f51af6dfd201e5ca", "parents": [ "03730954ad1dd8b5027565c1e20b427d5be5a66f" ], "author": { "name": "Mathias Krause", "email": "minipli@googlemail.com", "time": "Sun Apr 07 01:51:49 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed May 01 09:41:04 2013 -0700" }, "message": "Bluetooth: fix possible info leak in bt_sock_recvmsg()\n\n[ Upstream commit 4683f42fde3977bdb4e8a09622788cc8b5313778 ]\n\nIn case the socket is already shutting down, bt_sock_recvmsg() returns\nwith 0 without updating msg_namelen leading to net/socket.c leaking the\nlocal, uninitialized sockaddr_storage variable to userland -- 128 bytes\nof kernel stack memory.\n\nFix this by moving the msg_namelen assignment in front of the shutdown\ntest.\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nCc: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nCc: Gustavo Padovan \u003cgustavo@padovan.org\u003e\nCc: Johan Hedberg \u003cjohan.hedberg@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "caef33a4f3601f90ede96029c5c38a4b2b3cf80b", "tree": "279f8ead1f9f03bb277cacfc8579acc6ef05876e", "parents": [ "c625222d5a11de4284ef6194c34f4e161c4cb9ef" ], "author": { "name": "Vinicius Costa Gomes", "email": "vinicius.gomes@openbossa.org", "time": "Wed Mar 13 19:46:20 2013 -0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Apr 05 10:04:15 2013 -0700" }, "message": "Bluetooth: Fix not closing SCO sockets in the BT_CONNECT2 state\n\ncommit eb20ff9c91ddcb2d55c1849a87d3db85af5e88a9 upstream.\n\nWith deferred setup for SCO, it is possible that userspace closes the\nsocket when it is in the BT_CONNECT2 state, after the Connect Request is\nreceived but before the Accept Synchonous Connection is sent.\n\nIf this happens the following crash was observed, when the connection is\nterminated:\n\n[ +0.000003] hci_sync_conn_complete_evt: hci0 status 0x10\n[ +0.000005] sco_connect_cfm: hcon ffff88003d1bd800 bdaddr 40:98:4e:32:d7:39 status 16\n[ +0.000003] sco_conn_del: hcon ffff88003d1bd800 conn ffff88003cc8e300, err 110\n[ +0.000015] BUG: unable to handle kernel NULL pointer dereference at 0000000000000199\n[ +0.000906] IP: [\u003cffffffff810620dd\u003e] __lock_acquire+0xed/0xe82\n[ +0.000000] PGD 3d21f067 PUD 3d291067 PMD 0\n[ +0.000000] Oops: 0002 [#1] SMP\n[ +0.000000] Modules linked in: rfcomm bnep btusb bluetooth\n[ +0.000000] CPU 0\n[ +0.000000] Pid: 1481, comm: kworker/u:2H Not tainted 3.9.0-rc1-25019-gad82cdd #1 Bochs Bochs\n[ +0.000000] RIP: 0010:[\u003cffffffff810620dd\u003e] [\u003cffffffff810620dd\u003e] __lock_acquire+0xed/0xe82\n[ +0.000000] RSP: 0018:ffff88003c3c19d8 EFLAGS: 00010002\n[ +0.000000] RAX: 0000000000000001 RBX: 0000000000000246 RCX: 0000000000000000\n[ +0.000000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88003d1be868\n[ +0.000000] RBP: ffff88003c3c1a98 R08: 0000000000000002 R09: 0000000000000000\n[ +0.000000] R10: ffff88003d1be868 R11: ffff88003e20b000 R12: 0000000000000002\n[ +0.000000] R13: ffff88003aaa8000 R14: 000000000000006e R15: ffff88003d1be850\n[ +0.000000] FS: 0000000000000000(0000) GS:ffff88003e200000(0000) knlGS:0000000000000000\n[ +0.000000] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b\n[ +0.000000] CR2: 0000000000000199 CR3: 000000003c1cb000 CR4: 00000000000006b0\n[ +0.000000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ +0.000000] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400\n[ +0.000000] Process kworker/u:2H (pid: 1481, threadinfo ffff88003c3c0000, task ffff88003aaa8000)\n[ +0.000000] Stack:\n[ +0.000000] ffffffff81b16342 0000000000000000 0000000000000000 ffff88003d1be868\n[ +0.000000] ffffffff00000000 00018c0c7863e367 000000003c3c1a28 ffffffff8101efbd\n[ +0.000000] 0000000000000000 ffff88003e3d2400 ffff88003c3c1a38 ffffffff81007c7a\n[ +0.000000] Call Trace:\n[ +0.000000] [\u003cffffffff8101efbd\u003e] ? kvm_clock_read+0x34/0x3b\n[ +0.000000] [\u003cffffffff81007c7a\u003e] ? paravirt_sched_clock+0x9/0xd\n[ +0.000000] [\u003cffffffff81007fd4\u003e] ? sched_clock+0x9/0xb\n[ +0.000000] [\u003cffffffff8104fd7a\u003e] ? sched_clock_local+0x12/0x75\n[ +0.000000] [\u003cffffffff810632d1\u003e] lock_acquire+0x93/0xb1\n[ +0.000000] [\u003cffffffffa0022339\u003e] ? spin_lock+0x9/0xb [bluetooth]\n[ +0.000000] [\u003cffffffff8105f3d8\u003e] ? lock_release_holdtime.part.22+0x4e/0x55\n[ +0.000000] [\u003cffffffff814f6038\u003e] _raw_spin_lock+0x40/0x74\n[ +0.000000] [\u003cffffffffa0022339\u003e] ? spin_lock+0x9/0xb [bluetooth]\n[ +0.000000] [\u003cffffffff814f6936\u003e] ? _raw_spin_unlock+0x23/0x36\n[ +0.000000] [\u003cffffffffa0022339\u003e] spin_lock+0x9/0xb [bluetooth]\n[ +0.000000] [\u003cffffffffa00230cc\u003e] sco_conn_del+0x76/0xbb [bluetooth]\n[ +0.000000] [\u003cffffffffa002391d\u003e] sco_connect_cfm+0x2da/0x2e9 [bluetooth]\n[ +0.000000] [\u003cffffffffa000862a\u003e] hci_proto_connect_cfm+0x38/0x65 [bluetooth]\n[ +0.000000] [\u003cffffffffa0008d30\u003e] hci_sync_conn_complete_evt.isra.79+0x11a/0x13e [bluetooth]\n[ +0.000000] [\u003cffffffffa000cd96\u003e] hci_event_packet+0x153b/0x239d [bluetooth]\n[ +0.000000] [\u003cffffffff814f68ff\u003e] ? _raw_spin_unlock_irqrestore+0x48/0x5c\n[ +0.000000] [\u003cffffffffa00025f6\u003e] hci_rx_work+0xf3/0x2e3 [bluetooth]\n[ +0.000000] [\u003cffffffff8103efed\u003e] process_one_work+0x1dc/0x30b\n[ +0.000000] [\u003cffffffff8103ef83\u003e] ? process_one_work+0x172/0x30b\n[ +0.000000] [\u003cffffffff8103e07f\u003e] ? spin_lock_irq+0x9/0xb\n[ +0.000000] [\u003cffffffff8103fc8d\u003e] worker_thread+0x123/0x1d2\n[ +0.000000] [\u003cffffffff8103fb6a\u003e] ? manage_workers+0x240/0x240\n[ +0.000000] [\u003cffffffff81044211\u003e] kthread+0x9d/0xa5\n[ +0.000000] [\u003cffffffff81044174\u003e] ? __kthread_parkme+0x60/0x60\n[ +0.000000] [\u003cffffffff814f75bc\u003e] ret_from_fork+0x7c/0xb0\n[ +0.000000] [\u003cffffffff81044174\u003e] ? __kthread_parkme+0x60/0x60\n[ +0.000000] Code: d7 44 89 8d 50 ff ff ff 4c 89 95 58 ff ff ff e8 44 fc ff ff 44 8b 8d 50 ff ff ff 48 85 c0 4c 8b 95 58 ff ff ff 0f 84 7a 04 00 00 \u003cf0\u003e ff 80 98 01 00 00 83 3d 25 41 a7 00 00 45 8b b5 e8 05 00 00\n[ +0.000000] RIP [\u003cffffffff810620dd\u003e] __lock_acquire+0xed/0xe82\n[ +0.000000] RSP \u003cffff88003c3c19d8\u003e\n[ +0.000000] CR2: 0000000000000199\n[ +0.000000] ---[ end trace e73cd3b52352dd34 ]---\n\nSigned-off-by: Vinicius Costa Gomes \u003cvinicius.gomes@openbossa.org\u003e\nTested-by: Frederic Dalleau \u003cfrederic.dalleau@intel.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "a256a4c2001293548f0851b66ea8f39b704bac72", "tree": "304505ae5ae7959b388c3c919975b738e2492af1", "parents": [ "7308f843f36c30dd1247989a45611760567ea44f" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Tue Jan 29 10:44:23 2013 -0600" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Feb 14 10:48:53 2013 -0800" }, "message": "Bluetooth: Fix handling of unexpected SMP PDUs\n\ncommit 8cf9fa1240229cbdd888236c0c43fcbad680cf00 upstream.\n\nThe conn-\u003esmp_chan pointer can be NULL if SMP PDUs arrive at unexpected\nmoments. To avoid NULL pointer dereferences the code should be checking\nfor this and disconnect if an unexpected SMP PDU arrives. This patch\nfixes the issue by adding a check for conn-\u003esmp_chan for all other PDUs\nexcept pairing request and security request (which are are the first\nPDUs to come to initialize the SMP context).\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "5a6d60801c24f6966cf73894258134778ddccde5", "tree": "e2ec46e0454cd0815c65a17c83c3d3ba60a43561", "parents": [ "99141c253f45822edfab14fa34bfa47f56d803ad" ], "author": { "name": "Anderson Lizardo", "email": "anderson.lizardo@openbossa.org", "time": "Sun Jan 06 18:28:53 2013 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sun Feb 03 18:24:41 2013 -0600" }, "message": "Bluetooth: Fix incorrect strncpy() in hidp_setup_hid()\n\ncommit 0a9ab9bdb3e891762553f667066190c1d22ad62b upstream.\n\nThe length parameter should be sizeof(req-\u003ename) - 1 because there is no\nguarantee that string provided by userspace will contain the trailing\n\u0027\\0\u0027.\n\nCan be easily reproduced by manually setting req-\u003ename to 128 non-zero\nbytes prior to ioctl(HIDPCONNADD) and checking the device name setup on\ninput subsystem:\n\n$ cat /sys/devices/pnp0/00\\:04/tty/ttyS0/hci0/hci0\\:1/input8/name\nAAAAAA[...]AAAAAAAAf0:af:f0:af:f0:af\n\n(\"f0:af:f0:af:f0:af\" is the device bluetooth address, taken from \"phys\"\nfield in struct hid_device due to overflow.)\n\nSigned-off-by: Anderson Lizardo \u003canderson.lizardo@openbossa.org\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "dec3b6a0b8a4b1503617c45b351aedbd63adab58", "tree": "0ea51a4da048c6ecabb5141ea1306dd2f6a666fb", "parents": [ "112ae50d212e65816b9de8ea0010a430569d2fc6" ], "author": { "name": "Szymon Janc", "email": "szymon.janc@tieto.com", "time": "Tue Dec 11 08:51:19 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sun Feb 03 18:24:40 2013 -0600" }, "message": "Bluetooth: Fix sending HCI commands after reset\n\ncommit dbccd791a3fbbdac12c33834b73beff3984988e9 upstream.\n\nAfter sending reset command wait for its command complete event before\nsending next command. Some chips sends CC event for command received\nbefore reset if reset was send before chip replied with CC.\n\nThis is also required by specification that host shall not send\nadditional HCI commands before receiving CC for reset.\n\n\u003c HCI Command: Reset (0x03|0x0003) plen 0 [hci0] 18.404612\n\u003e HCI Event: Command Complete (0x0e) plen 4 [hci0] 18.405850\n Write Extended Inquiry Response (0x03|0x0052) ncmd 1\n Status: Success (0x00)\n\u003c HCI Command: Read Local Supported Features (0x04|0x0003) plen 0 [hci0] 18.406079\n\u003e HCI Event: Command Complete (0x0e) plen 4 [hci0] 18.407864\n Reset (0x03|0x0003) ncmd 1\n Status: Success (0x00)\n\u003c HCI Command: Read Local Supported Features (0x04|0x0003) plen 0 [hci0] 18.408062\n\u003e HCI Event: Command Complete (0x0e) plen 12 [hci0] 18.408835\n\nSigned-off-by: Szymon Janc \u003cszymon.janc@tieto.com\u003e\nAcked-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "1a0da46b46bc9b27414fcb1f1ad6f0eeee311f5e", "tree": "9c1e1a6bd1e689fc93213f7db5fbf7cee4de5b03", "parents": [ "7e2741804be03faf0eaba1df228e2ba5c07ecdd7" ], "author": { "name": "Gustavo Padovan", "email": "gustavo.padovan@collabora.co.uk", "time": "Wed Nov 21 00:50:21 2012 -0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Jan 11 09:07:17 2013 -0800" }, "message": "Bluetooth: cancel power_on work when unregistering the device\n\ncommit b9b5ef188e5a2222cfc16ef62a4703080750b451 upstream.\n\nWe need to cancel the hci_power_on work in order to avoid it run when we\ntry to free the hdev.\n\n[ 1434.201149] ------------[ cut here ]------------\n[ 1434.204998] WARNING: at lib/debugobjects.c:261 debug_print_object+0x8e/0xb0()\n[ 1434.208324] ODEBUG: free active (active state 0) object type: work_struct hint: hci\n_power_on+0x0/0x90\n[ 1434.210386] Pid: 8564, comm: trinity-child25 Tainted: G W 3.7.0-rc5-next-\n20121112-sasha-00018-g2f4ce0e #127\n[ 1434.210760] Call Trace:\n[ 1434.210760] [\u003cffffffff819f3d6e\u003e] ? debug_print_object+0x8e/0xb0\n[ 1434.210760] [\u003cffffffff8110b887\u003e] warn_slowpath_common+0x87/0xb0\n[ 1434.210760] [\u003cffffffff8110b911\u003e] warn_slowpath_fmt+0x41/0x50\n[ 1434.210760] [\u003cffffffff819f3d6e\u003e] debug_print_object+0x8e/0xb0\n[ 1434.210760] [\u003cffffffff8376b750\u003e] ? hci_dev_open+0x310/0x310\n[ 1434.210760] [\u003cffffffff83bf94e5\u003e] ? _raw_spin_unlock_irqrestore+0x55/0xa0\n[ 1434.210760] [\u003cffffffff819f3ee5\u003e] __debug_check_no_obj_freed+0xa5/0x230\n[ 1434.210760] [\u003cffffffff83785db0\u003e] ? bt_host_release+0x10/0x20\n[ 1434.210760] [\u003cffffffff819f4d15\u003e] debug_check_no_obj_freed+0x15/0x20\n[ 1434.210760] [\u003cffffffff8125eee7\u003e] kfree+0x227/0x330\n[ 1434.210760] [\u003cffffffff83785db0\u003e] bt_host_release+0x10/0x20\n[ 1434.210760] [\u003cffffffff81e539e5\u003e] device_release+0x65/0xc0\n[ 1434.210760] [\u003cffffffff819d3975\u003e] kobject_cleanup+0x145/0x190\n[ 1434.210760] [\u003cffffffff819d39cd\u003e] kobject_release+0xd/0x10\n[ 1434.210760] [\u003cffffffff819d33cc\u003e] kobject_put+0x4c/0x60\n[ 1434.210760] [\u003cffffffff81e548b2\u003e] put_device+0x12/0x20\n[ 1434.210760] [\u003cffffffff8376a334\u003e] hci_free_dev+0x24/0x30\n[ 1434.210760] [\u003cffffffff82fd8fe1\u003e] vhci_release+0x31/0x60\n[ 1434.210760] [\u003cffffffff8127be12\u003e] __fput+0x122/0x250\n[ 1434.210760] [\u003cffffffff811cab0d\u003e] ? rcu_user_exit+0x9d/0xd0\n[ 1434.210760] [\u003cffffffff8127bf49\u003e] ____fput+0x9/0x10\n[ 1434.210760] [\u003cffffffff81133402\u003e] task_work_run+0xb2/0xf0\n[ 1434.210760] [\u003cffffffff8106cfa7\u003e] do_notify_resume+0x77/0xa0\n[ 1434.210760] [\u003cffffffff83bfb0ea\u003e] int_signal+0x12/0x17\n[ 1434.210760] ---[ end trace a6d57fefbc8a8cc7 ]---\n\nReported-by: Sasha Levin \u003csasha.levin@oracle.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "7e2741804be03faf0eaba1df228e2ba5c07ecdd7", "tree": "e9740f5b6e5a6f93343732adfc8e55b75680de1c", "parents": [ "2145cea1e0be3262768fef384a87f426ecad06fe" ], "author": { "name": "Gustavo Padovan", "email": "gustavo.padovan@collabora.co.uk", "time": "Tue Nov 20 23:25:54 2012 -0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Jan 11 09:07:17 2013 -0800" }, "message": "Bluetooth: Add missing lock nesting notation\n\ncommit dc2a0e20fbc85a71c63aa4330b496fda33f6bf80 upstream.\n\nThis patch fixes the following report, it happens when accepting rfcomm\nconnections:\n\n[ 228.165378] \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n[ 228.165378] [ INFO: possible recursive locking detected ]\n[ 228.165378] 3.7.0-rc1-00536-gc1d5dc4 #120 Tainted: G W\n[ 228.165378] ---------------------------------------------\n[ 228.165378] bluetoothd/1341 is trying to acquire lock:\n[ 228.165378] (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+...}, at:\n[\u003cffffffffa0000aa0\u003e] bt_accept_dequeue+0xa0/0x180 [bluetooth]\n[ 228.165378]\n[ 228.165378] but task is already holding lock:\n[ 228.165378] (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+...}, at:\n[\u003cffffffffa0205118\u003e] rfcomm_sock_accept+0x58/0x2d0 [rfcomm]\n[ 228.165378]\n[ 228.165378] other info that might help us debug this:\n[ 228.165378] Possible unsafe locking scenario:\n[ 228.165378]\n[ 228.165378] CPU0\n[ 228.165378] ----\n[ 228.165378] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM);\n[ 228.165378] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM);\n[ 228.165378]\n[ 228.165378] *** DEADLOCK ***\n[ 228.165378]\n[ 228.165378] May be due to missing lock nesting notation\n\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "2214cc8d585df2bbfc894d0a3acc5a629fa1a985", "tree": "0c790c1d026a518096bbf8df282845e1678811c1", "parents": [ "4f442c50be050521667a8974fcc80cc8b881b2a6" ], "author": { "name": "Szymon Janc", "email": "szymon.janc@tieto.com", "time": "Fri Jun 08 11:33:33 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Mon Dec 03 11:46:36 2012 -0800" }, "message": "Bluetooth: Fix using uninitialized option in RFCMode\n\ncommit 8f321f853ea33330c7141977cd34804476e2e07e upstream.\n\nIf remote device sends bogus RFC option with invalid length,\nundefined options values are used. Fix this by using defaults when\nremote misbehaves.\n\nThis also fixes the following warning reported by gcc 4.7.0:\n\nnet/bluetooth/l2cap_core.c: In function \u0027l2cap_config_rsp\u0027:\nnet/bluetooth/l2cap_core.c:3302:13: warning: \u0027rfc.max_pdu_size\u0027 may be used uninitialized in this function [-Wmaybe-uninitialized]\nnet/bluetooth/l2cap_core.c:3266:24: note: \u0027rfc.max_pdu_size\u0027 was declared here\nnet/bluetooth/l2cap_core.c:3298:25: warning: \u0027rfc.monitor_timeout\u0027 may be used uninitialized in this function [-Wmaybe-uninitialized]\nnet/bluetooth/l2cap_core.c:3266:24: note: \u0027rfc.monitor_timeout\u0027 was declared here\nnet/bluetooth/l2cap_core.c:3297:25: warning: \u0027rfc.retrans_timeout\u0027 may be used uninitialized in this function [-Wmaybe-uninitialized]\nnet/bluetooth/l2cap_core.c:3266:24: note: \u0027rfc.retrans_timeout\u0027 was declared here\nnet/bluetooth/l2cap_core.c:3295:2: warning: \u0027rfc.mode\u0027 may be used uninitialized in this function [-Wmaybe-uninitialized]\nnet/bluetooth/l2cap_core.c:3266:24: note: \u0027rfc.mode\u0027 was declared here\n\nSigned-off-by: Szymon Janc \u003cszymon.janc@tieto.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "0fb0773f2da4ffa566e0c813dc295c44208debb5", "tree": "eeaf0c1ef2e7e08419ccde084883ae19c2e76989", "parents": [ "5a01241c81ac4bf6a7a486051699f791634e7b22" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Oct 11 16:26:06 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Oct 31 10:03:02 2012 -0700" }, "message": "Bluetooth: SMP: Fix setting unknown auth_req bits\n\ncommit 065a13e2cc665f6547dc7e8a9d6b6565badf940a upstream.\n\nWhen sending a pairing request or response we should not just blindly\ncopy the value that the remote device sent. Instead we should at least\nmake sure to mask out any unknown bits. This is particularly critical\nfrom the upcoming LE Secure Connections feature perspective as\nincorrectly indicating support for it (by copying the remote value)\nwould cause a failure to pair with devices that support it.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "c031edca540afb66764db24eed10eb149ac6c852", "tree": "867a052756c1bb8942b407f7098a3da4ea95261d", "parents": [ "0fcc0805df9cf7483e927cf6a4dc94938318c06a" ], "author": { "name": "Vinicius Costa Gomes", "email": "vinicius.gomes@openbossa.org", "time": "Thu Aug 23 21:32:44 2012 -0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Oct 02 10:30:34 2012 -0700" }, "message": "Bluetooth: Fix sending a HCI Authorization Request over LE links\n\ncommit d8343f125710fb596f7a88cd756679f14f4e77b9 upstream.\n\nIn the case that the link is already in the connected state and a\nPairing request arrives from the mgmt interface, hci_conn_security()\nwould be called but it was not considering LE links.\n\nReported-by: João Paulo Rechi Vita \u003cjprvita@openbossa.org\u003e\nSigned-off-by: Vinicius Costa Gomes \u003cvinicius.gomes@openbossa.org\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "0fcc0805df9cf7483e927cf6a4dc94938318c06a", "tree": "5218645ca3737cf7ec1d9b3a039b6a1ec8048931", "parents": [ "27d50469825fd267f44e13fb0627b011c0da6abd" ], "author": { "name": "Vinicius Costa Gomes", "email": "vinicius.gomes@openbossa.org", "time": "Thu Aug 23 21:32:43 2012 -0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Oct 02 10:30:34 2012 -0700" }, "message": "Bluetooth: Change signature of smp_conn_security()\n\ncommit cc110922da7e902b62d18641a370fec01a9fa794 upstream.\n\nTo make it clear that it may be called from contexts that may not have\nany knowledge of L2CAP, we change the connection parameter, to receive\na hci_conn.\n\nThis also makes it clear that it is checking the security of the link.\n\nSigned-off-by: Vinicius Costa Gomes \u003cvinicius.gomes@openbossa.org\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "27d50469825fd267f44e13fb0627b011c0da6abd", "tree": "3bc48f09647dfa7cb31375136cde64ddd6abfea1", "parents": [ "403c9ebee757d7ec82e3e06e456ae2445f0b9f40" ], "author": { "name": "Andre Guedes", "email": "andre.guedes@openbossa.org", "time": "Wed Aug 01 20:34:15 2012 -0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Oct 02 10:30:34 2012 -0700" }, "message": "Bluetooth: Fix use-after-free bug in SMP\n\ncommit 61a0cfb008f57ecf7eb28ee762952fb42dc15d15 upstream.\n\nIf SMP fails, we should always cancel security_timer delayed work.\nOtherwise, security_timer function may run after l2cap_conn object\nhas been freed.\n\nThis patch fixes the following warning reported by ODEBUG:\n\nWARNING: at lib/debugobjects.c:261 debug_print_object+0x7c/0x8d()\nHardware name: Bochs\nODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x27\nModules linked in: btusb bluetooth\nPid: 440, comm: kworker/u:2 Not tainted 3.5.0-rc1+ #4\nCall Trace:\n [\u003cffffffff81174600\u003e] ? free_obj_work+0x4a/0x7f\n [\u003cffffffff81023eb8\u003e] warn_slowpath_common+0x7e/0x97\n [\u003cffffffff81023f65\u003e] warn_slowpath_fmt+0x41/0x43\n [\u003cffffffff811746b1\u003e] debug_print_object+0x7c/0x8d\n [\u003cffffffff810394f0\u003e] ? __queue_work+0x241/0x241\n [\u003cffffffff81174fdd\u003e] debug_check_no_obj_freed+0x92/0x159\n [\u003cffffffff810ac08e\u003e] slab_free_hook+0x6f/0x77\n [\u003cffffffffa0019145\u003e] ? l2cap_conn_del+0x148/0x157 [bluetooth]\n [\u003cffffffff810ae408\u003e] kfree+0x59/0xac\n [\u003cffffffffa0019145\u003e] l2cap_conn_del+0x148/0x157 [bluetooth]\n [\u003cffffffffa001b9a2\u003e] l2cap_recv_frame+0xa77/0xfa4 [bluetooth]\n [\u003cffffffff810592f9\u003e] ? trace_hardirqs_on_caller+0x112/0x1ad\n [\u003cffffffffa001c86c\u003e] l2cap_recv_acldata+0xe2/0x264 [bluetooth]\n [\u003cffffffffa0002b2f\u003e] hci_rx_work+0x235/0x33c [bluetooth]\n [\u003cffffffff81038dc3\u003e] ? process_one_work+0x126/0x2fe\n [\u003cffffffff81038e22\u003e] process_one_work+0x185/0x2fe\n [\u003cffffffff81038dc3\u003e] ? process_one_work+0x126/0x2fe\n [\u003cffffffff81059f2e\u003e] ? lock_acquired+0x1b5/0x1cf\n [\u003cffffffffa00028fa\u003e] ? le_scan_work+0x11d/0x11d [bluetooth]\n [\u003cffffffff81036fb6\u003e] ? spin_lock_irq+0x9/0xb\n [\u003cffffffff81039209\u003e] worker_thread+0xcf/0x175\n [\u003cffffffff8103913a\u003e] ? rescuer_thread+0x175/0x175\n [\u003cffffffff8103cfe0\u003e] kthread+0x95/0x9d\n [\u003cffffffff812c5054\u003e] kernel_threadi_helper+0x4/0x10\n [\u003cffffffff812c36b0\u003e] ? retint_restore_args+0x13/0x13\n [\u003cffffffff8103cf4b\u003e] ? flush_kthread_worker+0xdb/0xdb\n [\u003cffffffff812c5050\u003e] ? gs_change+0x13/0x13\n\nThis bug can be reproduced using hctool lecc or l2test tools and\nbluetoothd not running.\n\nSigned-off-by: Andre Guedes \u003candre.guedes@openbossa.org\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "a6be20b8cd1e5e847c4191b8f249b939aaabf987", "tree": "544ffd0fef49963cd28e75f9e8dc8f7308d768b5", "parents": [ "ec4d417c66a406bb464598220faf9f561d5b6d25" ], "author": { "name": "Andrzej Kaczmarek", "email": "andrzej.kaczmarek@tieto.com", "time": "Wed Aug 29 10:02:09 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Oct 02 10:30:08 2012 -0700" }, "message": "Bluetooth: mgmt: Fix enabling LE while powered off\n\ncommit 562fcc246ebe31ade6e1be08585673b9b2785498 upstream.\n\nWhen new BT USB adapter is plugged in it\u0027s configured while still being powered\noff (HCI_AUTO_OFF flag is set), thus Set LE will only set dev_flags but won\u0027t\nwrite changes to controller. As a result it\u0027s not possible to start device\ndiscovery session on LE controller as it uses interleaved discovery which\nrequires LE Supported Host flag in extended features.\n\nThis patch ensures HCI Write LE Host Supported is sent when Set Powered is\ncalled to power on controller and clear HCI_AUTO_OFF flag.\n\nSigned-off-by: Andrzej Kaczmarek \u003candrzej.kaczmarek@tieto.com\u003e\nAcked-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "ec4d417c66a406bb464598220faf9f561d5b6d25", "tree": "080f11280018b491b3c998c26a99ffe6ff158481", "parents": [ "dcc8dbc21ff2052c0df6dee3e1a36c3ef4f1133c" ], "author": { "name": "Vinicius Costa Gomes", "email": "vinicius.gomes@openbossa.org", "time": "Fri Sep 14 16:34:46 2012 -0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Oct 02 10:30:08 2012 -0700" }, "message": "Bluetooth: Fix not removing power_off delayed work\n\ncommit 78c04c0bf52360dc2f7185e99c8e9aa05d73ae5a upstream.\n\nFor example, when a usb reset is received (I could reproduce it\nrunning something very similar to this[1] in a loop) it could be\nthat the device is unregistered while the power_off delayed work\nis still scheduled to run.\n\nBacktrace:\n\nWARNING: at lib/debugobjects.c:261 debug_print_object+0x7c/0x8d()\nHardware name: To Be Filled By O.E.M.\nODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x26\nModules linked in: nouveau mxm_wmi btusb wmi bluetooth ttm coretemp drm_kms_helper\nPid: 2114, comm: usb-reset Not tainted 3.5.0bt-next #2\nCall Trace:\n [\u003cffffffff8124cc00\u003e] ? free_obj_work+0x57/0x91\n [\u003cffffffff81058f88\u003e] warn_slowpath_common+0x7e/0x97\n [\u003cffffffff81059035\u003e] warn_slowpath_fmt+0x41/0x43\n [\u003cffffffff8124ccb6\u003e] debug_print_object+0x7c/0x8d\n [\u003cffffffff8106e3ec\u003e] ? __queue_work+0x259/0x259\n [\u003cffffffff8124d63e\u003e] ? debug_check_no_obj_freed+0x6f/0x1b5\n [\u003cffffffff8124d667\u003e] debug_check_no_obj_freed+0x98/0x1b5\n [\u003cffffffffa00aa031\u003e] ? bt_host_release+0x10/0x1e [bluetooth]\n [\u003cffffffff810fc035\u003e] kfree+0x90/0xe6\n [\u003cffffffffa00aa031\u003e] bt_host_release+0x10/0x1e [bluetooth]\n [\u003cffffffff812ec2f9\u003e] device_release+0x4a/0x7e\n [\u003cffffffff8123ef57\u003e] kobject_release+0x11d/0x154\n [\u003cffffffff8123ed98\u003e] kobject_put+0x4a/0x4f\n [\u003cffffffff812ec0d9\u003e] put_device+0x12/0x14\n [\u003cffffffffa009472b\u003e] hci_free_dev+0x22/0x26 [bluetooth]\n [\u003cffffffffa0280dd0\u003e] btusb_disconnect+0x96/0x9f [btusb]\n [\u003cffffffff813581b4\u003e] usb_unbind_interface+0x57/0x106\n [\u003cffffffff812ef988\u003e] __device_release_driver+0x83/0xd6\n [\u003cffffffff812ef9fb\u003e] device_release_driver+0x20/0x2d\n [\u003cffffffff813582a7\u003e] usb_driver_release_interface+0x44/0x7b\n [\u003cffffffff81358795\u003e] usb_forced_unbind_intf+0x45/0x4e\n [\u003cffffffff8134f959\u003e] usb_reset_device+0xa6/0x12e\n [\u003cffffffff8135df86\u003e] usbdev_do_ioctl+0x319/0xe20\n [\u003cffffffff81203244\u003e] ? avc_has_perm_flags+0xc9/0x12e\n [\u003cffffffff812031a0\u003e] ? avc_has_perm_flags+0x25/0x12e\n [\u003cffffffff81050101\u003e] ? do_page_fault+0x31e/0x3a1\n [\u003cffffffff8135eaa6\u003e] usbdev_ioctl+0x9/0xd\n [\u003cffffffff811126b1\u003e] vfs_ioctl+0x21/0x34\n [\u003cffffffff81112f7b\u003e] do_vfs_ioctl+0x408/0x44b\n [\u003cffffffff81208d45\u003e] ? file_has_perm+0x76/0x81\n [\u003cffffffff8111300f\u003e] sys_ioctl+0x51/0x76\n [\u003cffffffff8158db22\u003e] system_call_fastpath+0x16/0x1b\n\n[1] http://cpansearch.perl.org/src/DPAVLIN/Biblio-RFID-0.03/examples/usbreset.c\n\nSigned-off-by: Vinicius Costa Gomes \u003cvinicius.gomes@openbossa.org\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "dcc8dbc21ff2052c0df6dee3e1a36c3ef4f1133c", "tree": "6fc28055b407f59a94f9086b85269c9ea98c6b15", "parents": [ "f51909c0af2ebc533eaf48c7daff503b3e54d983" ], "author": { "name": "Andrzej Kaczmarek", "email": "andrzej.kaczmarek@tieto.com", "time": "Wed Aug 29 10:02:08 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Oct 02 10:30:08 2012 -0700" }, "message": "Bluetooth: mgmt: Fix enabling SSP while powered off\n\ncommit 3d1cbdd6aefff711bcf389fdabc4af9bc22e8201 upstream.\n\nWhen new BT USB adapter is plugged in it\u0027s configured while still being powered\noff (HCI_AUTO_OFF flag is set), thus Set SSP will only set dev_flags but won\u0027t\nwrite changes to controller. As a result remote devices won\u0027t use Secure Simple\nPairing with our device due to SSP Host Support flag disabled in extended\nfeatures and may also reject SSP attempt from our side (with possible fallback\nto legacy pairing).\n\nThis patch ensures HCI Write Simple Pairing Mode is sent when Set Powered is\ncalled to power on controller and clear HCI_AUTO_OFF flag.\n\nSigned-off-by: Andrzej Kaczmarek \u003candrzej.kaczmarek@tieto.com\u003e\nAcked-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "dbcba7a54a0327f0ef6d6a3ec53b67d0969109b6", "tree": "802a5ba716e47fa4c7364c0681f48a0a3c7e124b", "parents": [ "8717cd3d63233ee5591bf8e8d6e5960a1f6252b1" ], "author": { "name": "Mathias Krause", "email": "minipli@googlemail.com", "time": "Wed Aug 15 11:31:51 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Oct 02 10:29:36 2012 -0700" }, "message": "Bluetooth: L2CAP - Fix info leak via getsockname()\n\n[ Upstream commit 792039c73cf176c8e39a6e8beef2c94ff46522ed ]\n\nThe L2CAP code fails to initialize the l2_bdaddr_type member of struct\nsockaddr_l2 and the padding byte added for alignment. It that for leaks\ntwo bytes kernel stack via the getsockname() syscall. Add an explicit\nmemset(0) before filling the structure to avoid the info leak.\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nCc: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nCc: Gustavo Padovan \u003cgustavo@padovan.org\u003e\nCc: Johan Hedberg \u003cjohan.hedberg@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "8717cd3d63233ee5591bf8e8d6e5960a1f6252b1", "tree": "ffc4c49e501cf875899afc531332fe6b87c4cfff", "parents": [ "279d3f5b2d402034dee1a81b7f5e3f678aa46d21" ], "author": { "name": "Mathias Krause", "email": "minipli@googlemail.com", "time": "Wed Aug 15 11:31:50 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Oct 02 10:29:36 2012 -0700" }, "message": "Bluetooth: RFCOMM - Fix info leak via getsockname()\n\n[ Upstream commit 9344a972961d1a6d2c04d9008b13617bcb6ec2ef ]\n\nThe RFCOMM code fails to initialize the trailing padding byte of struct\nsockaddr_rc added for alignment. It that for leaks one byte kernel stack\nvia the getsockname() syscall. Add an explicit memset(0) before filling\nthe structure to avoid the info leak.\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nCc: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nCc: Gustavo Padovan \u003cgustavo@padovan.org\u003e\nCc: Johan Hedberg \u003cjohan.hedberg@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "279d3f5b2d402034dee1a81b7f5e3f678aa46d21", "tree": "7e44b53ad4a9dc5cebdc5efde5ab80c926d877db", "parents": [ "745dcdb0fd330f0cc984bd8a7764a81f04e44780" ], "author": { "name": "Mathias Krause", "email": "minipli@googlemail.com", "time": "Wed Aug 15 11:31:49 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Oct 02 10:29:36 2012 -0700" }, "message": "Bluetooth: RFCOMM - Fix info leak in ioctl(RFCOMMGETDEVLIST)\n\n[ Upstream commit f9432c5ec8b1e9a09b9b0e5569e3c73db8de432a ]\n\nThe RFCOMM code fails to initialize the two padding bytes of struct\nrfcomm_dev_list_req inserted for alignment before copying it to\nuserland. Additionally there are two padding bytes in each instance of\nstruct rfcomm_dev_info. The ioctl() that for disclosures two bytes plus\ndev_num times two bytes uninitialized kernel heap memory.\n\nAllocate the memory using kzalloc() to fix this issue.\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nCc: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nCc: Gustavo Padovan \u003cgustavo@padovan.org\u003e\nCc: Johan Hedberg \u003cjohan.hedberg@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "745dcdb0fd330f0cc984bd8a7764a81f04e44780", "tree": "f0acac1ff978f33ebb9fa23bb470d18e375a30df", "parents": [ "639edee79eb2035b6fe3976f50a1c5364acc7352" ], "author": { "name": "Mathias Krause", "email": "minipli@googlemail.com", "time": "Wed Aug 15 11:31:48 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Oct 02 10:29:36 2012 -0700" }, "message": "Bluetooth: RFCOMM - Fix info leak in getsockopt(BT_SECURITY)\n\n[ Upstream commit 9ad2de43f1aee7e7274a4e0d41465489299e344b ]\n\nThe RFCOMM code fails to initialize the key_size member of struct\nbt_security before copying it to userland -- that for leaking one\nbyte kernel stack. Initialize key_size with 0 to avoid the info\nleak.\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nCc: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nCc: Gustavo Padovan \u003cgustavo@padovan.org\u003e\nCc: Johan Hedberg \u003cjohan.hedberg@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "639edee79eb2035b6fe3976f50a1c5364acc7352", "tree": "b891e242addb0d42f802f1d6042b8da270f7d663", "parents": [ "87c42a1dfd5939d0a24795cd99b3d63daa4e1eff" ], "author": { "name": "Mathias Krause", "email": "minipli@googlemail.com", "time": "Wed Aug 15 11:31:47 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Oct 02 10:29:36 2012 -0700" }, "message": "Bluetooth: HCI - Fix info leak via getsockname()\n\n[ Upstream commit 3f68ba07b1da811bf383b4b701b129bfcb2e4988 ]\n\nThe HCI code fails to initialize the hci_channel member of struct\nsockaddr_hci and that for leaks two bytes kernel stack via the\ngetsockname() syscall. Initialize hci_channel with 0 to avoid the\ninfo leak.\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nCc: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nCc: Gustavo Padovan \u003cgustavo@padovan.org\u003e\nCc: Johan Hedberg \u003cjohan.hedberg@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "87c42a1dfd5939d0a24795cd99b3d63daa4e1eff", "tree": "abff8acbebc4d3f6037a53ea40dee1e9c75e1fff", "parents": [ "458ed5622e976848aacdea07d4bfcb84a350c460" ], "author": { "name": "Mathias Krause", "email": "minipli@googlemail.com", "time": "Wed Aug 15 11:31:46 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Oct 02 10:29:36 2012 -0700" }, "message": "Bluetooth: HCI - Fix info leak in getsockopt(HCI_FILTER)\n\n[ Upstream commit e15ca9a0ef9a86f0477530b0f44a725d67f889ee ]\n\nThe HCI code fails to initialize the two padding bytes of struct\nhci_ufilter before copying it to userland -- that for leaking two\nbytes kernel stack. Add an explicit memset(0) before filling the\nstructure to avoid the info leak.\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nCc: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nCc: Gustavo Padovan \u003cgustavo@padovan.org\u003e\nCc: Johan Hedberg \u003cjohan.hedberg@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "3cf3cfc448c480c86c439ba7c707a7b4f73ba9d9", "tree": "cf9b205436c7bbd8425fca235cdcd9e37c3e5391", "parents": [ "4a20bce04ec14c74f5b77c73d7d8d476ace74cea" ], "author": { "name": "Szymon Janc", "email": "szymon.janc@tieto.com", "time": "Thu Jul 19 14:46:08 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Sep 14 10:00:18 2012 -0700" }, "message": "Bluetooth: Fix legacy pairing with some devices\n\ncommit a9ea3ed9b71cc3271dd59e76f65748adcaa76422 upstream.\n\nSome devices e.g. some Android based phones don\u0027t do SDP search before\npairing and cancel legacy pairing when ACL is disconnected.\n\nPIN Code Request event which changes ACL timeout to HCI_PAIRING_TIMEOUT\nis only received after remote user entered PIN.\n\nIn that case no L2CAP is connected so default HCI_DISCONN_TIMEOUT\n(2 seconds) is being used to timeout ACL connection. This results in\nproblems with legacy pairing as remote user has only few seconds to\nenter PIN before ACL is disconnected.\n\nIncrease disconnect timeout for incomming connection to\nHCI_PAIRING_TIMEOUT if SSP is disabled and no linkey exists.\n\nTo avoid keeping ACL alive for too long after SDP search set ACL\ntimeout back to HCI_DISCONN_TIMEOUT when L2CAP is connected.\n\n2012-07-19 13:24:43.413521 \u003c HCI Command: Create Connection (0x01|0x0005) plen 13\n bdaddr 00:02:72:D6:6A:3F ptype 0xcc18 rswitch 0x01 clkoffset 0x0000\n Packet type: DM1 DM3 DM5 DH1 DH3 DH5\n2012-07-19 13:24:43.425224 \u003e HCI Event: Command Status (0x0f) plen 4\n Create Connection (0x01|0x0005) status 0x00 ncmd 1\n2012-07-19 13:24:43.885222 \u003e HCI Event: Role Change (0x12) plen 8\n status 0x00 bdaddr 00:02:72:D6:6A:3F role 0x01\n Role: Slave\n2012-07-19 13:24:44.054221 \u003e HCI Event: Connect Complete (0x03) plen 11\n status 0x00 handle 42 bdaddr 00:02:72:D6:6A:3F type ACL encrypt 0x00\n2012-07-19 13:24:44.054313 \u003c HCI Command: Read Remote Supported Features (0x01|0x001b) plen 2\n handle 42\n2012-07-19 13:24:44.055176 \u003e HCI Event: Page Scan Repetition Mode Change (0x20) plen 7\n bdaddr 00:02:72:D6:6A:3F mode 0\n2012-07-19 13:24:44.056217 \u003e HCI Event: Max Slots Change (0x1b) plen 3\n handle 42 slots 5\n2012-07-19 13:24:44.059218 \u003e HCI Event: Command Status (0x0f) plen 4\n Read Remote Supported Features (0x01|0x001b) status 0x00 ncmd 0\n2012-07-19 13:24:44.062192 \u003e HCI Event: Command Status (0x0f) plen 4\n Unknown (0x00|0x0000) status 0x00 ncmd 1\n2012-07-19 13:24:44.067219 \u003e HCI Event: Read Remote Supported Features (0x0b) plen 11\n status 0x00 handle 42\n Features: 0xbf 0xfe 0xcf 0xfe 0xdb 0xff 0x7b 0x87\n2012-07-19 13:24:44.067248 \u003c HCI Command: Read Remote Extended Features (0x01|0x001c) plen 3\n handle 42 page 1\n2012-07-19 13:24:44.071217 \u003e HCI Event: Command Status (0x0f) plen 4\n Read Remote Extended Features (0x01|0x001c) status 0x00 ncmd 1\n2012-07-19 13:24:44.076218 \u003e HCI Event: Read Remote Extended Features (0x23) plen 13\n status 0x00 handle 42 page 1 max 1\n Features: 0x01 0x00 0x00 0x00 0x00 0x00 0x00 0x00\n2012-07-19 13:24:44.076249 \u003c HCI Command: Remote Name Request (0x01|0x0019) plen 10\n bdaddr 00:02:72:D6:6A:3F mode 2 clkoffset 0x0000\n2012-07-19 13:24:44.081218 \u003e HCI Event: Command Status (0x0f) plen 4\n Remote Name Request (0x01|0x0019) status 0x00 ncmd 1\n2012-07-19 13:24:44.105214 \u003e HCI Event: Remote Name Req Complete (0x07) plen 255\n status 0x00 bdaddr 00:02:72:D6:6A:3F name \u0027uw000951-0\u0027\n2012-07-19 13:24:44.105284 \u003c HCI Command: Authentication Requested (0x01|0x0011) plen 2\n handle 42\n2012-07-19 13:24:44.111207 \u003e HCI Event: Command Status (0x0f) plen 4\n Authentication Requested (0x01|0x0011) status 0x00 ncmd 1\n2012-07-19 13:24:44.112220 \u003e HCI Event: Link Key Request (0x17) plen 6\n bdaddr 00:02:72:D6:6A:3F\n2012-07-19 13:24:44.112249 \u003c HCI Command: Link Key Request Negative Reply (0x01|0x000c) plen 6\n bdaddr 00:02:72:D6:6A:3F\n2012-07-19 13:24:44.115215 \u003e HCI Event: Command Complete (0x0e) plen 10\n Link Key Request Negative Reply (0x01|0x000c) ncmd 1\n status 0x00 bdaddr 00:02:72:D6:6A:3F\n2012-07-19 13:24:44.116215 \u003e HCI Event: PIN Code Request (0x16) plen 6\n bdaddr 00:02:72:D6:6A:3F\n2012-07-19 13:24:48.099184 \u003e HCI Event: Auth Complete (0x06) plen 3\n status 0x13 handle 42\n Error: Remote User Terminated Connection\n2012-07-19 13:24:48.179182 \u003e HCI Event: Disconn Complete (0x05) plen 4\n status 0x00 handle 42 reason 0x13\n Reason: Remote User Terminated Connection\n\nSigned-off-by: Szymon Janc \u003cszymon.janc@tieto.com\u003e\nAcked-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "4a20bce04ec14c74f5b77c73d7d8d476ace74cea", "tree": "398e58b2c115a384a0d3836f6bd6338c2c642777", "parents": [ "a8b8ad6dcf49c84c7a8633082191c6fd7539c355" ], "author": { "name": "Ram Malovany", "email": "ramm@ti.com", "time": "Thu Jul 19 10:26:11 2012 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Sep 14 10:00:18 2012 -0700" }, "message": "Bluetooth: Set name_state to unknown when entry name is empty\n\ncommit c3e7c0d90b14a3e7ac091d24cef09efb516d587b upstream.\n\nWhen the name of the given entry is empty , the state needs to be\nupdated accordingly.\n\nSigned-off-by: Ram Malovany \u003cramm@ti.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "a8b8ad6dcf49c84c7a8633082191c6fd7539c355", "tree": "04b83d3d6fd2d6c2c5fefff150b835d7a315bead", "parents": [ "a431bd57a95921188f61096e5ce29d1b769be118" ], "author": { "name": "Ram Malovany", "email": "ramm@ti.com", "time": "Thu Jul 19 10:26:10 2012 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Sep 14 10:00:18 2012 -0700" }, "message": "Bluetooth: Fix using a NULL inquiry cache entry\n\ncommit 7cc8380eb10347016d95bf6f9d842c2ae6d12932 upstream.\n\nIf the device was not found in a list of found devices names of which\nare pending.This may happen in a case when HCI Remote Name Request\nwas sent as a part of incoming connection establishment procedure.\nHence there is no need to continue resolving a next name as it will\nbe done upon receiving another Remote Name Request Complete Event.\nThis will fix a kernel crash when trying to use this entry to resolve\nthe next name.\n\nSigned-off-by: Ram Malovany \u003cramm@ti.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "a431bd57a95921188f61096e5ce29d1b769be118", "tree": "f4fbb606f078679e9f9e918354ddba0b075e4ada", "parents": [ "4c795fe18aa1d2756a82c46ca29d4bfad2704d4d" ], "author": { "name": "Ram Malovany", "email": "ramm@ti.com", "time": "Thu Jul 19 10:26:09 2012 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Sep 14 10:00:18 2012 -0700" }, "message": "Bluetooth: Fix using NULL inquiry entry\n\ncommit c810089c27e48b816181b454fcc493d19fdbc2ba upstream.\n\nIf entry wasn\u0027t found in the hci_inquiry_cache_lookup_resolve do not\nresolve the name.This will fix a kernel crash when trying to use NULL\npointer.\n\nSigned-off-by: Ram Malovany \u003cramm@ti.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "671267bf3aac3dae0555730b07ef29c042e325b2", "tree": "89ee980737493ce6247b3a454636e48bd488e1c7", "parents": [ "a7d7723ae7c0178d715c06c5621e8fd8014ba92f" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Sat May 12 16:11:50 2012 -0300" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Mon May 14 13:56:15 2012 -0400" }, "message": "Bluetooth: mgmt: Fix device_connected sending order\n\nThe mgmt_ev_device_connected signal must be sent before any event\nindications happen for sockets associated with the connection. Otherwise\ne.g. device authorization for the sockets will fail with ENOTCONN as\nuser space things that there is no baseband link.\n\nThis patch fixes the issue by ensuring that the device_connected event\nif sent (if it hasn\u0027t been so already) as soon as the first ACL data\npacket arrives from the remote device.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "a7d7723ae7c0178d715c06c5621e8fd8014ba92f", "tree": "8e09cd37ed267e792481c2ad699bcaff9596e5e7", "parents": [ "574e02abaf816b582685805f0c1150ca9f1f18ee" ], "author": { "name": "Gustavo Padovan", "email": "gustavo@padovan.org", "time": "Sun May 13 03:20:07 2012 -0300" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Mon May 14 13:51:25 2012 -0400" }, "message": "Bluetooth: notify userspace of security level change\n\nIt fixes L2CAP socket based security level elevation during a\nconnection. The HID profile needs this (for keyboards) and it is the only\nway to achieve the security level elevation when using the management\ninterface to talk to the kernel (hence the management enabling patch\nbeing the one that exposes this issue).\n\nIt enables the userspace a security level change when the socket is\nalready connected and create a way to notify the socket the result of the\nrequest. At the moment of the request the socket is made non writable, if\nthe request fails the connections closes, otherwise the socket is made\nwritable again, POLL_OUT is emmited.\n\nSigned-off-by: Gustavo Padovan \u003cgustavo@padovan.org\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "4dcc0637fc3c36c1f58ffdcaf2dc0dc7de72449f", "tree": "587ffa9493e4b6af014f9acb2c09177c2c54af3b", "parents": [ "afa762f6871a8cb05fbef5d0f83fac14304aa816", "985140369be1e886754d8ac0375dd64e4f727311" ], "author": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Fri Apr 27 15:16:43 2012 -0400" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Fri Apr 27 15:16:43 2012 -0400" }, "message": "Merge branch \u0027for-upstream\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth\n" }, { "commit": "16cde9931bcd8d8ca968ef1cded02684ea040374", "tree": "1ecdedcee16e1bb04f22765d6299e1f17386f514", "parents": [ "ac71311e65e2c4c2dbac76db698fecbee755b016" ], "author": { "name": "Szymon Janc", "email": "szymon.janc@tieto.com", "time": "Fri Apr 13 12:32:42 2012 +0200" }, "committer": { "name": "Gustavo Padovan", "email": "gustavo@padovan.org", "time": "Tue Apr 24 11:38:41 2012 -0300" }, "message": "Bluetooth: Fix missing break in hci_cmd_complete_evt\n\nCommand complete event for HCI_OP_USER_PASSKEY_NEG_REPLY would result\nin calling handler function also for HCI_OP_LE_SET_SCAN_PARAM. This\ncould result in undefined behaviour.\n\nSigned-off-by: Szymon Janc \u003cszymon.janc@tieto.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo@padovan.org\u003e\n" }, { "commit": "6ec5bcadc21e13ceba8c144e4731eccac01d04f7", "tree": "f0851fd42f167cf85539d1bd9109b17e0e0bf59e", "parents": [ "745c0ce35f904aeff8e1ea325c259a14a00ff1b7" ], "author": { "name": "Vishal Agarwal", "email": "vishal.agarwal@stericsson.com", "time": "Mon Apr 16 14:44:44 2012 +0530" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Mon Apr 16 12:57:45 2012 +0300" }, "message": "Bluetooth: Temporary keys should be retained during connection\n\nIf a key is non persistent then it should not be used in future\nconnections but it should be kept for current connection. And it\nshould be removed when connecion is removed.\n\nSigned-off-by: Vishal Agarwal \u003cvishal.agarwal@stericsson.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "745c0ce35f904aeff8e1ea325c259a14a00ff1b7", "tree": "e1d05d006621b7cfd1009265ea2afe73b5cc2149", "parents": [ "87522a433ba6886b5ccbb497e0a7cb8097def64e" ], "author": { "name": "Vishal Agarwal", "email": "vishal.agarwal@stericsson.com", "time": "Fri Apr 13 17:43:22 2012 +0530" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Mon Apr 16 12:57:40 2012 +0300" }, "message": "Bluetooth: hci_persistent_key should return bool\n\nThis patch changes the return type of function hci_persistent_key\nfrom int to bool because it makes more sense to return information\nwhether a key is persistent or not as a bool.\n\nSigned-off-by: Vishal Agarwal \u003cvishal.agarwal@stericsson.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "41833af713457fe92f432a7354bc690587652879", "tree": "6f821f85bd33c1823d557d1482f8aa6216cde5b3", "parents": [ "f68e556e23d1a4176b563bcb25d8baf2c5313f91", "66f3b913e68e8e62bd2f9499495eeb6cc81b2662" ], "author": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Mon Apr 09 15:47:49 2012 -0400" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Mon Apr 09 15:47:49 2012 -0400" }, "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth\n" }, { "commit": "a591afc01d9e48affbacb365558a31e53c85af45", "tree": "9bb91f4eb94ec69fc4706c4944788ec5f3586063", "parents": [ "820d41cf0cd0e94a5661e093821e2e5c6b36a9d8", "31796ac4e8f0e88f5c10f1ad6dab8f19bebe44a4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 29 18:12:23 2012 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 29 18:12:23 2012 -0700" }, "message": "Merge branch \u0027x86-x32-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x32 support for x86-64 from Ingo Molnar:\n \"This tree introduces the X32 binary format and execution mode for x86:\n 32-bit data space binaries using 64-bit instructions and 64-bit kernel\n syscalls.\n\n This allows applications whose working set fits into a 32 bits address\n space to make use of 64-bit instructions while using a 32-bit address\n space with shorter pointers, more compressed data structures, etc.\"\n\nFix up trivial context conflicts in arch/x86/{Kconfig,vdso/vma.c}\n\n* \u0027x86-x32-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (71 commits)\n x32: Fix alignment fail in struct compat_siginfo\n x32: Fix stupid ia32/x32 inversion in the siginfo format\n x32: Add ptrace for x32\n x32: Switch to a 64-bit clock_t\n x32: Provide separate is_ia32_task() and is_x32_task() predicates\n x86, mtrr: Use explicit sizing and padding for the 64-bit ioctls\n x86/x32: Fix the binutils auto-detect\n x32: Warn and disable rather than error if binutils too old\n x32: Only clear TIF_X32 flag once\n x32: Make sure TS_COMPAT is cleared for x32 tasks\n fs: Remove missed -\u003efds_bits from cessation use of fd_set structs internally\n fs: Fix close_on_exec pointer in alloc_fdtable\n x32: Drop non-__vdso weak symbols from the x32 VDSO\n x32: Fix coding style violations in the x32 VDSO code\n x32: Add x32 VDSO support\n x32: Allow x32 to be configured\n x32: If configured, add x32 system calls to system call tables\n x32: Handle process creation\n x32: Signal-related system calls\n x86: Add #ifdef CONFIG_COMPAT to \u003casm/sys_ia32.h\u003e\n ...\n" }, { "commit": "76ec9de843c3cff41b3b15b752e1d08d91f0ad18", "tree": "e28def37d8ccb081575d60e60f531bcc78b0a998", "parents": [ "531563850b29726bf37a81e877277902881ab77e" ], "author": { "name": "Andrei Emeltchenko", "email": "andrei.emeltchenko@intel.com", "time": "Mon Mar 12 12:13:11 2012 +0200" }, "committer": { "name": "Gustavo Padovan", "email": "gustavo@padovan.org", "time": "Wed Mar 28 15:11:19 2012 -0300" }, "message": "Bluetooth: mgmt: Add missing endian conversion\n\nAdd missing endian conversion for page scan interval and window.\n\nSigned-off-by: Andrei Emeltchenko \u003candrei.emeltchenko@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "531563850b29726bf37a81e877277902881ab77e", "tree": "bbec7c1432d65063262513003e6231327d91651e", "parents": [ "55ed7d4d1469eafbe3ad7e8fcd44f5af27845a81" ], "author": { "name": "Brian Gix", "email": "bgix@codeaurora.org", "time": "Fri Mar 09 14:07:03 2012 -0800" }, "committer": { "name": "Gustavo Padovan", "email": "gustavo@padovan.org", "time": "Wed Mar 28 15:06:09 2012 -0300" }, "message": "Bluetooth: mgmt: Fix corruption of device_connected pkt\n\nIncorrect pointer passed to eir_append_data made mgmt_device_connected\nevent unparsable by mgmt user space entity.\n\nSigned-off-by: Brian Gix \u003cbgix@codeaurora.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "9ffc93f203c18a70623f21950f1dd473c9ec48cd", "tree": "1eb3536ae183b0bfbf7f5152a6fe4f430ae881c2", "parents": [ "96f951edb1f1bdbbc99b0cd458f9808bb83d58ae" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Mar 28 18:30:03 2012 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Mar 28 18:30:03 2012 +0100" }, "message": "Remove all #inclusions of asm/system.h\n\nRemove all #inclusions of asm/system.h preparatory to splitting and killing\nit. Performed with the following command:\n\nperl -p -i -e \u0027s!^#\\s*include\\s*\u003casm/system[.]h\u003e.*\\n!!\u0027 `grep -Irl \u0027^#\\s*include\\s*\u003casm/system[.]h\u003e\u0027 *`\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "8d7e1c7f7e5f9fe8f6279752fc33fcb77afd5001", "tree": "1fce3c7c9832a276399c47c407c2163f8d7dcbe6", "parents": [ "94324962066231a938564bebad0f941cd2d06bb2" ], "author": { "name": "Andrei Emeltchenko", "email": "andrei.emeltchenko@intel.com", "time": "Fri Mar 23 09:42:15 2012 +0200" }, "committer": { "name": "Gustavo Padovan", "email": "gustavo@padovan.org", "time": "Wed Mar 28 12:02:39 2012 -0300" }, "message": "Bluetooth: Fix memory leaks due to chan refcnt\n\nWhen we queue delayed work we hold(chan) and delayed work\nshall put(chan) after execution.\n\nSigned-off-by: Andrei Emeltchenko \u003candrei.emeltchenko@intel.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo@padovan.org\u003e\n" }, { "commit": "94324962066231a938564bebad0f941cd2d06bb2", "tree": "fbf3906cbc625f7140bb01fe45b963ac4471add8", "parents": [ "33b69bf80a3704d45341928e4ff68b6ebd470686" ], "author": { "name": "Johan Hovold", "email": "jhovold@gmail.com", "time": "Thu Mar 15 14:48:41 2012 +0100" }, "committer": { "name": "Gustavo Padovan", "email": "gustavo@padovan.org", "time": "Wed Mar 28 12:02:35 2012 -0300" }, "message": "Bluetooth: hci_core: fix NULL-pointer dereference at unregister\n\nMake sure hci_dev_open returns immediately if hci_dev_unregister has\nbeen called.\n\nThis fixes a race between hci_dev_open and hci_dev_unregister which can\nlead to a NULL-pointer dereference.\n\nBug is 100% reproducible using hciattach and a disconnected serial port:\n\n0. # hciattach -n /dev/ttyO1 any noflow\n\n1. hci_dev_open called from hci_power_on grabs req lock\n2. hci_init_req executes but device fails to initialise (times out\n eventually)\n3. hci_dev_open is called from hci_sock_ioctl and sleeps on req lock\n4. hci_uart_tty_close calls hci_dev_unregister and sleeps on req lock in\n hci_dev_do_close\n5. hci_dev_open (1) releases req lock\n6. hci_dev_do_close grabs req lock and returns as device is not up\n7. hci_dev_unregister sleeps in destroy_workqueue\n8. hci_dev_open (3) grabs req lock, calls hci_init_req and eventually sleeps\n9. hci_dev_unregister finishes, while hci_dev_open is still running...\n\n[ 79.627136] INFO: trying to register non-static key.\n[ 79.632354] the code is fine but needs lockdep annotation.\n[ 79.638122] turning off the locking correctness validator.\n[ 79.643920] [\u003cc00188bc\u003e] (unwind_backtrace+0x0/0xf8) from [\u003cc00729c4\u003e] (__lock_acquire+0x1590/0x1ab0)\n[ 79.653594] [\u003cc00729c4\u003e] (__lock_acquire+0x1590/0x1ab0) from [\u003cc00733f8\u003e] (lock_acquire+0x9c/0x128)\n[ 79.663085] [\u003cc00733f8\u003e] (lock_acquire+0x9c/0x128) from [\u003cc0040a88\u003e] (run_timer_softirq+0x150/0x3ac)\n[ 79.672668] [\u003cc0040a88\u003e] (run_timer_softirq+0x150/0x3ac) from [\u003cc003a3b8\u003e] (__do_softirq+0xd4/0x22c)\n[ 79.682281] [\u003cc003a3b8\u003e] (__do_softirq+0xd4/0x22c) from [\u003cc003a924\u003e] (irq_exit+0x8c/0x94)\n[ 79.690856] [\u003cc003a924\u003e] (irq_exit+0x8c/0x94) from [\u003cc0013a50\u003e] (handle_IRQ+0x34/0x84)\n[ 79.699157] [\u003cc0013a50\u003e] (handle_IRQ+0x34/0x84) from [\u003cc0008530\u003e] (omap3_intc_handle_irq+0x48/0x4c)\n[ 79.708648] [\u003cc0008530\u003e] (omap3_intc_handle_irq+0x48/0x4c) from [\u003cc037499c\u003e] (__irq_usr+0x3c/0x60)\n[ 79.718048] Exception stack(0xcf281fb0 to 0xcf281ff8)\n[ 79.723358] 1fa0: 0001e6a0 be8dab00 0001e698 00036698\n[ 79.731933] 1fc0: 0002df98 0002df38 0000001f 00000000 b6f234d0 00000000 00000004 00000000\n[ 79.740509] 1fe0: 0001e6f8 be8d6aa0 be8dac50 0000aab8 80000010 ffffffff\n[ 79.747497] Unable to handle kernel NULL pointer dereference at virtual address 00000000\n[ 79.756011] pgd \u003d cf3b4000\n[ 79.758850] [00000000] *pgd\u003d8f0c7831, *pte\u003d00000000, *ppte\u003d00000000\n[ 79.765502] Internal error: Oops: 80000007 [#1]\n[ 79.770294] Modules linked in:\n[ 79.773529] CPU: 0 Tainted: G W (3.3.0-rc6-00002-gb5d5c87 #421)\n[ 79.781066] PC is at 0x0\n[ 79.783721] LR is at run_timer_softirq+0x16c/0x3ac\n[ 79.788787] pc : [\u003c00000000\u003e] lr : [\u003cc0040aa4\u003e] psr: 60000113\n[ 79.788787] sp : cf281ee0 ip : 00000000 fp : cf280000\n[ 79.800903] r10: 00000004 r9 : 00000100 r8 : b6f234d0\n[ 79.806427] r7 : c0519c28 r6 : cf093488 r5 : c0561a00 r4 : 00000000\n[ 79.813323] r3 : 00000000 r2 : c054eee0 r1 : 00000001 r0 : 00000000\n[ 79.820190] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user\n[ 79.827728] Control: 10c5387d Table: 8f3b4019 DAC: 00000015\n[ 79.833801] Process gpsd (pid: 1265, stack limit \u003d 0xcf2802e8)\n[ 79.839965] Stack: (0xcf281ee0 to 0xcf282000)\n[ 79.844573] 1ee0: 00000002 00000000 c0040a24 00000000 00000002 cf281f08 00200200 00000000\n[ 79.853210] 1f00: 00000000 cf281f18 cf281f08 00000000 00000000 00000000 cf281f18 cf281f18\n[ 79.861816] 1f20: 00000000 00000001 c056184c 00000000 00000001 b6f234d0 c0561848 00000004\n[ 79.870452] 1f40: cf280000 c003a3b8 c051e79c 00000001 00000000 00000100 3fa9e7b8 0000000a\n[ 79.879089] 1f60: 00000025 cf280000 00000025 00000000 00000000 b6f234d0 00000000 00000004\n[ 79.887756] 1f80: 00000000 c003a924 c053ad38 c0013a50 fa200000 cf281fb0 ffffffff c0008530\n[ 79.896362] 1fa0: 0001e6a0 0000aab8 80000010 c037499c 0001e6a0 be8dab00 0001e698 00036698\n[ 79.904998] 1fc0: 0002df98 0002df38 0000001f 00000000 b6f234d0 00000000 00000004 00000000\n[ 79.913665] 1fe0: 0001e6f8 be8d6aa0 be8dac50 0000aab8 80000010 ffffffff 00fbf700 04ffff00\n[ 79.922302] [\u003cc0040aa4\u003e] (run_timer_softirq+0x16c/0x3ac) from [\u003cc003a3b8\u003e] (__do_softirq+0xd4/0x22c)\n[ 79.931945] [\u003cc003a3b8\u003e] (__do_softirq+0xd4/0x22c) from [\u003cc003a924\u003e] (irq_exit+0x8c/0x94)\n[ 79.940582] [\u003cc003a924\u003e] (irq_exit+0x8c/0x94) from [\u003cc0013a50\u003e] (handle_IRQ+0x34/0x84)\n[ 79.948913] [\u003cc0013a50\u003e] (handle_IRQ+0x34/0x84) from [\u003cc0008530\u003e] (omap3_intc_handle_irq+0x48/0x4c)\n[ 79.958404] [\u003cc0008530\u003e] (omap3_intc_handle_irq+0x48/0x4c) from [\u003cc037499c\u003e] (__irq_usr+0x3c/0x60)\n[ 79.967773] Exception stack(0xcf281fb0 to 0xcf281ff8)\n[ 79.973083] 1fa0: 0001e6a0 be8dab00 0001e698 00036698\n[ 79.981658] 1fc0: 0002df98 0002df38 0000001f 00000000 b6f234d0 00000000 00000004 00000000\n[ 79.990234] 1fe0: 0001e6f8 be8d6aa0 be8dac50 0000aab8 80000010 ffffffff\n[ 79.997161] Code: bad PC value\n[ 80.000396] ---[ end trace 6f6739840475f9ee ]---\n[ 80.005279] Kernel panic - not syncing: Fatal exception in interrupt\n\nCc: stable \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Johan Hovold \u003cjhovold@gmail.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "6e4aff103774d6ee937a1dba9b1b4bf89100e7f6", "tree": "8d8a4302656c1547ab1a844725be452efb77a173", "parents": [ "3f17790c2d8524c3ddc4946bd716714becf079e1" ], "author": { "name": "Santosh Nayak", "email": "santoshprasadnayak@gmail.com", "time": "Thu Mar 01 22:46:36 2012 +0530" }, "committer": { "name": "Gustavo Padovan", "email": "gustavo@padovan.org", "time": "Wed Mar 28 12:02:26 2012 -0300" }, "message": "Bluetooth: Fix Endian Bug.\n\nFix network to host endian conversion for L2CAP chan id.\n\nSigned-off-by: Santosh Nayak \u003csantoshprasadnayak@gmail.com\u003e\nAcked-by: Andrei Emeltchenko \u003candrei.emeltchenko@intel.com\u003e\nSigned-off-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\n" }, { "commit": "3b59bf081622b6446db77ad06c93fe23677bc533", "tree": "3f4bb5a27c90cc86994a1f6d3c53fbf9208003cb", "parents": [ "e45836fafe157df137a837093037f741ad8f4c90", "bbdb32cb5b73597386913d052165423b9d736145" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 20 21:04:47 2012 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 20 21:04:47 2012 -0700" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next\n\nPull networking merge from David Miller:\n \"1) Move ixgbe driver over to purely page based buffering on receive.\n From Alexander Duyck.\n\n 2) Add receive packet steering support to e1000e, from Bruce Allan.\n\n 3) Convert TCP MD5 support over to RCU, from Eric Dumazet.\n\n 4) Reduce cpu usage in handling out-of-order TCP packets on modern\n systems, also from Eric Dumazet.\n\n 5) Support the IP{,V6}_UNICAST_IF socket options, making the wine\n folks happy, from Erich Hoover.\n\n 6) Support VLAN trunking from guests in hyperv driver, from Haiyang\n Zhang.\n\n 7) Support byte-queue-limtis in r8169, from Igor Maravic.\n\n 8) Outline code intended for IP_RECVTOS in IP_PKTOPTIONS existed but\n was never properly implemented, Jiri Benc fixed that.\n\n 9) 64-bit statistics support in r8169 and 8139too, from Junchang Wang.\n\n 10) Support kernel side dump filtering by ctmark in netfilter\n ctnetlink, from Pablo Neira Ayuso.\n\n 11) Support byte-queue-limits in gianfar driver, from Paul Gortmaker.\n\n 12) Add new peek socket options to assist with socket migration, from\n Pavel Emelyanov.\n\n 13) Add sch_plug packet scheduler whose queue is controlled by\n userland daemons using explicit freeze and release commands. From\n Shriram Rajagopalan.\n\n 14) Fix FCOE checksum offload handling on transmit, from Yi Zou.\"\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next: (1846 commits)\n Fix pppol2tp getsockname()\n Remove printk from rds_sendmsg\n ipv6: fix incorrent ipv6 ipsec packet fragment\n cpsw: Hook up default ndo_change_mtu.\n net: qmi_wwan: fix build error due to cdc-wdm dependecy\n netdev: driver: ethernet: Add TI CPSW driver\n netdev: driver: ethernet: add cpsw address lookup engine support\n phy: add am79c874 PHY support\n mlx4_core: fix race on comm channel\n bonding: send igmp report for its master\n fs_enet: Add MPC5125 FEC support and PHY interface selection\n net: bpf_jit: fix BPF_S_LDX_B_MSH compilation\n net: update the usage of CHECKSUM_UNNECESSARY\n fcoe: use CHECKSUM_UNNECESSARY instead of CHECKSUM_PARTIAL on tx\n net: do not do gso for CHECKSUM_UNNECESSARY in netif_needs_gso\n ixgbe: Fix issues with SR-IOV loopback when flow control is disabled\n net/hyperv: Fix the code handling tx busy\n ixgbe: fix namespace issues when FCoE/DCB is not enabled\n rtlwifi: Remove unused ETH_ADDR_LEN defines\n igbvf: Use ETH_ALEN\n ...\n\nFix up fairly trivial conflicts in drivers/isdn/gigaset/interface.c and\ndrivers/net/usb/{Kconfig,qmi_wwan.c} as per David.\n" }, { "commit": "843ec558f91b8e8fdb6efc908f2c0506407cc750", "tree": "1866dccbc298390fc8686875942324075fd83f9d", "parents": [ "71e7ff2578c3bc67fd893a9ba7f69fd563f271de", "fb8ebec00b04f921ea1614a7303f1a8e5e9e47c5" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 20 11:24:39 2012 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 20 11:24:39 2012 -0700" }, "message": "Merge tag \u0027tty-3.3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty\n\nPull TTY/serial patches from Greg KH:\n \"tty and serial merge for 3.4-rc1\n\n Here\u0027s the big serial and tty merge for the 3.4-rc1 tree.\n\n There\u0027s loads of fixes and reworks in here from Jiri for the tty\n layer, and a number of patches from Alan to help try to wrestle the vt\n layer into a sane model.\n\n Other than that, lots of driver updates and fixes, and other minor\n stuff, all detailed in the shortlog.\"\n\n* tag \u0027tty-3.3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty: (132 commits)\n serial: pxa: add clk_prepare/clk_unprepare calls\n TTY: Wrong unicode value copied in con_set_unimap()\n serial: PL011: clear pending interrupts\n serial: bfin-uart: Don\u0027t access tty circular buffer in TX DMA interrupt after it is reset.\n vt: NULL dereference in vt_do_kdsk_ioctl()\n tty: serial: vt8500: fix annotations for probe/remove\n serial: remove back and forth conversions in serial_out_sync\n serial: use serial_port_in/out vs serial_in/out in 8250\n serial: introduce generic port in/out helpers\n serial: reduce number of indirections in 8250 code\n serial: delete useless void casts in 8250.c\n serial: make 8250\u0027s serial_in shareable to other drivers.\n serial: delete last unused traces of pausing I/O in 8250\n pch_uart: Add module parameter descriptions\n pch_uart: Use existing default_baud in setup_console\n pch_uart: Add user_uartclk parameter\n pch_uart: Add Fish River Island II uart clock quirks\n pch_uart: Use uartclk instead of base_baud\n mpc5200b/uart: select more tolerant uart prescaler on low baudrates\n tty: moxa: fix bit test in moxa_start()\n ...\n" }, { "commit": "2f16669d322e05171c9e1cfd94f402f7399bd2a3", "tree": "6a036cd0352928dd7056976a5f457c229322d67f", "parents": [ "87cab16beb882d3f9e61a2c0184fa7cf76de1f90" ], "author": { "name": "Jiri Slaby", "email": "jslaby@suse.cz", "time": "Mon Mar 05 14:51:52 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 08 11:37:58 2012 -0800" }, "message": "TTY: remove re-assignments to tty_driver members\n\nAll num, magic and owner are set by alloc_tty_driver. No need to\nre-set them on each allocation site.\n\npti driver sets something different to what it passes to\nalloc_tty_driver. It is not a bug, since we don\u0027t use the lines\nparameter in any way. Anyway this is fixed, and now we do the right\nthing.\n\nSigned-off-by: Jiri Slaby \u003cjslaby@suse.cz\u003e\nAcked-by: Tilman Schmidt \u003ctilman@imap.cc\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "fdde0a26a218d95e2ea38c0838ab6f24040af14c", "tree": "d75f8452272fb189a19312ca406ee3a672d6ef0a", "parents": [ "b3ff53ff006b7906c88adf9d0fccc06a8877fae1" ], "author": { "name": "Ido Yariv", "email": "ido@wizery.com", "time": "Mon Mar 05 20:09:38 2012 +0200" }, "committer": { "name": "Gustavo F. Padovan", "email": "padovan@profusion.mobi", "time": "Thu Mar 08 02:26:04 2012 -0300" }, "message": "Bluetooth: Set security level on incoming pairing request\n\nIf a master would like to raise the security level, it will send a\npairing request. While the pending security level is set on an incoming\nsecurity request (from a slave), it is not set on a pairing request. As\na result, the security level would not be raised on the slave in such\ncase.\n\nFix this by setting the pending security when receiving pairing\nrequests according to the requested authorization.\n\nSigned-off-by: Ido Yariv \u003cido@wizery.com\u003e\nAcked-by: Vinicius Costa Gomes \u003cvinicius.gomes@openbossa.org\u003e\nSigned-off-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\n" }, { "commit": "b3ff53ff006b7906c88adf9d0fccc06a8877fae1", "tree": "0cc76080325736697ce78f74c71c42daaa2dd94f", "parents": [ "e57d758ae8e8f00e80f233c823aeeef34bd92796" ], "author": { "name": "Ido Yariv", "email": "ido@wizery.com", "time": "Mon Mar 05 20:07:08 2012 +0200" }, "committer": { "name": "Gustavo F. Padovan", "email": "padovan@profusion.mobi", "time": "Thu Mar 08 02:25:00 2012 -0300" }, "message": "Bluetooth: Fix access to the STK generation methods matrix\n\nThe major index of the table is actually the remote I/O capabilities, not\nthe local ones. As a result, devices with different I/O capabilities\ncould have used wrong or even unsupported generation methods.\n\nSigned-off-by: Ido Yariv \u003cido@wizery.com\u003e\nCC: Brian Gix \u003cbgix@codeaurora.org\u003e\nAcked-by: Vinicius Costa Gomes \u003cvinicius.gomes@openbossa.org\u003e\nSigned-off-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\n" }, { "commit": "e57d758ae8e8f00e80f233c823aeeef34bd92796", "tree": "0e97a6233731b3865039cad385fdd077dc3bc89a", "parents": [ "9498ba7a1d38d42eef4ef6d906ab1743c9f0fd6f" ], "author": { "name": "Luiz Augusto von Dentz", "email": "luiz.von.dentz@intel.com", "time": "Wed Mar 07 20:20:14 2012 +0200" }, "committer": { "name": "Gustavo F. Padovan", "email": "padovan@profusion.mobi", "time": "Thu Mar 08 02:20:22 2012 -0300" }, "message": "Bluetooth: Fix using uninitialized variable\n\n+ src/net/bluetooth/rfcomm/tty.c: warning: \u0027p\u0027 is used uninitialized in this\n function: \u003d\u003e 218\n+ src/net/bluetooth/rfcomm/tty.c: warning: \u0027p\u0027 may be used uninitialized in\n this function: \u003d\u003e 218\n\nSigned-off-by: Luiz Augusto von Dentz \u003cluiz.von.dentz@intel.com\u003e\nSigned-off-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\n" }, { "commit": "04124681f104c1980024ff249a34a77a249fd2bc", "tree": "5caad821f1cdd55930b054cbdeab1c45421559b4", "parents": [ "f64b993f44c3a5fe709b276ac5652d006afe9d33" ], "author": { "name": "Gustavo F. Padovan", "email": "padovan@profusion.mobi", "time": "Thu Mar 08 01:25:00 2012 -0300" }, "committer": { "name": "Gustavo F. Padovan", "email": "padovan@profusion.mobi", "time": "Thu Mar 08 02:02:26 2012 -0300" }, "message": "Bluetooth: fix conding style issues all over the tree\n\nSigned-off-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\n" }, { "commit": "74fe619ef96466d562a1a13e7cbab783624ec2f3", "tree": "ecd5aab7e52b86eddf8ab2461a8a9a4dab1694f0", "parents": [ "2b4bf3974249da74f4aef1e9180d4beaf6332515" ], "author": { "name": "Andre Guedes", "email": "andre.guedes@openbossa.org", "time": "Thu Mar 01 18:19:57 2012 -0300" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Sat Mar 03 01:43:02 2012 +0200" }, "message": "Bluetooth: Don\u0027t force DISCOVERY_STOPPED state in inquiry_cache_flush\n\nWe are not supposed to force DISCOVERY_STOPPED in inquiry_cache_flush\nbecause we may break the discovery state machine. For instance, during\ninterleaved discovery, when we are about to start inquiry, the state\nmachine forcibly goes to DISCOVERY_STOPPED while it should stay in\nDISCOVERY_FINDING state.\n\nThis problem results in unexpected behaviors such as sending two\nmgmt_discovering events to userspace (when only one event is expected)\nand Stop Discovery failures.\n\nSigned-off-by: Andre Guedes \u003candre.guedes@openbossa.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "2b4bf3974249da74f4aef1e9180d4beaf6332515", "tree": "d6b32d4c9fbebd723963cb24475b2cd6630be133", "parents": [ "4f87da80a5210e66fb47b0e839f4d05016986f78" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Sat Mar 03 00:19:06 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Sat Mar 03 01:28:47 2012 +0200" }, "message": "Bluetooth: mgmt: Fix updating local name when powering on\n\nWhen powering on we need to apply whatever name has been set through\nmgmt_set_local_name. The appropriate place for this is mgmt_powered()\nand not hci_setup() since this needs to be applied also if the HCI init\nsequence was already completed but the adapter was still \"powered off\"\nfrom a mgmt perspective due the the HCI_AUTO_OFF still being set.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "4f87da80a5210e66fb47b0e839f4d05016986f78", "tree": "9227fcd778badfaa5190cbdd3bd854039fdc6d8f", "parents": [ "5f15903279143eb640f9ba1c0e72b52fe9e9e2a6" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Mar 02 19:55:56 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Sat Mar 03 01:28:47 2012 +0200" }, "message": "Bluetooth: Remove HCI_PI_MGMT_INIT flag for sockets\n\nThis flag is of no use right now and is in fact harmful in that it\nprevents the HCI_MGMT flag to be set for any controllers that may need\nit after the first one that bluetoothd takes into use (the flag is\ncleared for the first controller so any subsequent ones through the same\nbluetoothd mgmt socket never get the HCI_MGMT flag set).\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "5f15903279143eb640f9ba1c0e72b52fe9e9e2a6", "tree": "6eed1909e54f252f0ce46c0550c240a099a30e3e", "parents": [ "d4f68526e438dbb7d194b08499a96c733131ad72" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Mar 02 03:13:19 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Mar 02 03:19:24 2012 +0200" }, "message": "Bluetooth: mgmt: Add new error code for invalid index\n\nThe index is part of the command header and not its parameters so it\nmakes sense to distinguish this from the invalid parameters error.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "d4f68526e438dbb7d194b08499a96c733131ad72", "tree": "47446595ec96d34c5905e99a951b98792beb9071", "parents": [ "9f8ce967caed427f78d00bb6b07d79cb040a88bd" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Mar 02 03:07:07 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Mar 02 03:19:24 2012 +0200" }, "message": "Bluetooth: mgmt: Fix command status error code values\n\nError codes in the command status should always be from the set of\nvalues defined for mgmt and never e.g. POSIX error codes.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "9f8ce967caed427f78d00bb6b07d79cb040a88bd", "tree": "0ff8b8b19e431d602a51e2d4a781dd26479c95d7", "parents": [ "17b02e625662906f370a3eb5e7495cf06ed7d4a4" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Mar 02 03:06:04 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Mar 02 03:19:24 2012 +0200" }, "message": "Bluetooth: Fix clearing of HCI_PENDING_CLASS flag\n\nWhen doing reset HCI_PENDING_CLASS is one of the flags that should be\ncleared (since it\u0027s used for a pending HCI command and a reset clear all\npending commands).\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "17b02e625662906f370a3eb5e7495cf06ed7d4a4", "tree": "db12888e81d5520bb050700d9179842976795f22", "parents": [ "ba13ccd9b911e043c0f11e60cbb72bd4de194205" ], "author": { "name": "Marcel Holtmann", "email": "marcel@holtmann.org", "time": "Thu Mar 01 14:32:37 2012 -0800" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Mar 02 00:35:57 2012 +0200" }, "message": "Bluetooth: Update MGMT and SMP timeout constants to use msecs_to_jiffies\n\nThe MGMT and SMP timeout constants are always used in form of jiffies. So\njust include the conversion from msecs in the define itself. This has the\nadvantage of making the code where the timeout is used more readable.\n\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "ba13ccd9b911e043c0f11e60cbb72bd4de194205", "tree": "7c8437d2693bfa7c438d5ddc59f329b57974c810", "parents": [ "be22b54e8711734f4cb93ac31723b955fe9dbbe0" ], "author": { "name": "Marcel Holtmann", "email": "marcel@holtmann.org", "time": "Thu Mar 01 14:25:33 2012 -0800" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Mar 02 00:33:14 2012 +0200" }, "message": "Bluetooth: Update L2CAP timeout constants to use msecs_to_jiffies\n\nThe L2CAP timeout constants are always used in form of jiffies. So just\ninclude the conversion from msecs in the define itself. This has the\nadvantage of making the code where the timeout is used more readable.\n\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "be22b54e8711734f4cb93ac31723b955fe9dbbe0", "tree": "bd767d8adc1d3ab28700335c99d9e55572d0b82c", "parents": [ "9d1acbfb774fa5e043a44adedfcc36c9837a5e61" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Mar 01 22:24:41 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Mar 01 23:55:58 2012 +0200" }, "message": "Bluetooth: mgmt: Centralize message length checks\n\nThis patch moves the command length information into the command handler\ntable allowing the removal of length checks from the handler functions\nand doing the check in a single place before calling the handler\nfunction.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "0f4e68cf6e70fc219f219799c799a8a3e3c13100", "tree": "208b69caf263957571c5601c625157f46fea8f81", "parents": [ "6a919082e9b82a0de20f1248a33f3b3f005cebaf" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Tue Feb 28 17:18:30 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Mar 01 23:55:58 2012 +0200" }, "message": "Bluetooth: mgmt: Move command handlers into a table\n\nBy moving the command handlers into a table (the index being equal to\nthe opcode) the lookup is made a bit more efficient. Having a struct to\ndescribe each handler also paves the way to add more meta-data for each\nhandler, e.g. the minimum message size for the command and allow\nhandling of common tasks like this in a centralized place.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "6a919082e9b82a0de20f1248a33f3b3f005cebaf", "tree": "0784dda7a89db37c0c185bb1bf7c9e94a7db8c53", "parents": [ "bdb6d97154b7b7e98867e9b71bae0f47ec70b1d7" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Tue Feb 28 06:17:26 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Mar 01 23:55:58 2012 +0200" }, "message": "Bluetooth: mgmt: Initialize HCI_MGMT flag for any command\n\nThe read_controller_info is typically the first command that user space\nsends when taking a controller into use. This is also the reason why\nthis command has been used as the trigger to set the HCI_MGMT flag.\nHowever, when not running the user-space daemon and using command line\ntools it is possible that read_controller_info is not the first\ncontroller specific command. This patch moves the HCI_MGMT\ninitialization to a generic place where it will be set for whatever\nhappens to be the first mgmt command targetting a specific controller.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "bdb6d97154b7b7e98867e9b71bae0f47ec70b1d7", "tree": "73d3cc5c3204ec55164c8f111ba58d1004b63627", "parents": [ "75fb0e324daa48ec458fb5c2960eb07b80cfad9d" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Tue Feb 28 06:13:32 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Mar 01 23:55:58 2012 +0200" }, "message": "Bluetooth: mgmt: Refactor hci_dev lookup for commands\n\nAlmost all mgmt commands need to lookup a struct hci_dev based on the\nindex received within the mgmt headers. It makese therefore sense to\nlook this up in a single place and then just pass the hdev pointer to\neach command handler function.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "75fb0e324daa48ec458fb5c2960eb07b80cfad9d", "tree": "78229ecbcf7b08b1aa3a47ce9e5927e8e64dd6a2", "parents": [ "8b90129cc5789a4c65547c91c9a7b1fd3a4d56a4" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Mar 01 21:35:55 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Mar 01 21:44:55 2012 +0200" }, "message": "Bluetooth: Fix init sequence for some CSR based controllers\n\nSome CSR controllers will generate a spontaneous reset during init and\njust eat up any pending command without sending a command complete for\nit. This patch solves the issue by just resending whatever was the last\nsent command. hci_send_cmd is not used since we need to bypass all other\ncommands in the send queue.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "8b90129cc5789a4c65547c91c9a7b1fd3a4d56a4", "tree": "16e8be2df2d6bb0de2c5b13bacbb2023d300bdcc", "parents": [ "1de028ceb54ccd28cc96f1530a195ae1b6a6d5b5" ], "author": { "name": "Andre Guedes", "email": "andre.guedes@openbossa.org", "time": "Thu Feb 23 18:09:27 2012 -0300" }, "committer": { "name": "Gustavo F. Padovan", "email": "padovan@profusion.mobi", "time": "Thu Mar 01 12:12:53 2012 -0300" }, "message": "Bluetooth: Check capabilities in BR/EDR and LE-Only discovery\n\nThis patch add an extra check for BR/EDR and LE-Only discovery.\nThis way, we are able to return error immediately if the discovery\ntype requested is not supported by the device.\n\nSigned-off-by: Andre Guedes \u003candre.guedes@openbossa.org\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "1de028ceb54ccd28cc96f1530a195ae1b6a6d5b5", "tree": "17b1f270a183af3bd785dc1009c10f82a8212a43", "parents": [ "00abfe4442864144a77f70b6b411d691bcb796bf" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Wed Feb 29 19:55:35 2012 -0800" }, "committer": { "name": "Gustavo F. Padovan", "email": "padovan@profusion.mobi", "time": "Thu Mar 01 01:28:04 2012 -0300" }, "message": "Bluetooth: mgmt: Add missing hci_dev locking to set_le()\n\nThe set_le() function was missing hci_dev locking which is e.g. critical\nfor the mgmt pending command adding/removing.\n\nAcked-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "00abfe4442864144a77f70b6b411d691bcb796bf", "tree": "2a1029a6ea9aa06573c6fd149c3fcb02620a6716", "parents": [ "53bf2426b4122d933213bba78bf736e88f7dc929" ], "author": { "name": "Gustavo F. Padovan", "email": "padovan@profusion.mobi", "time": "Thu Mar 01 00:37:10 2012 -0300" }, "committer": { "name": "Gustavo F. Padovan", "email": "padovan@profusion.mobi", "time": "Thu Mar 01 01:27:54 2012 -0300" }, "message": "Bluetooth: Fix coding style with breaking lines\n\nOur limit is 80 and broken lines should as right as possible.\n\nSigned-off-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\n" }, { "commit": "53bf2426b4122d933213bba78bf736e88f7dc929", "tree": "7aa170fb5fe325101e59e43b80a5343ea3456817", "parents": [ "95b23582d796305c66952188de2f5159b28be766" ], "author": { "name": "Andre Guedes", "email": "andre.guedes@openbossa.org", "time": "Wed Feb 29 16:38:13 2012 -0300" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Wed Feb 29 18:50:25 2012 +0200" }, "message": "Bluetooth: Fix Kconfig help description\n\nSMP is not a kernel module, it is part of Bluetooth Core (as already\ndescribed in lines above).\n\nSigned-off-by: Andre Guedes \u003candre.guedes@openbossa.org\u003e\nAcked-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "95b23582d796305c66952188de2f5159b28be766", "tree": "2f227289ab4ef0dafa76eb690b0bc39c767807f8", "parents": [ "426c189a1b34c0d36d5eddbe1c35bc961b1a1b68" ], "author": { "name": "Szymon Janc", "email": "szymon@janc.net.pl", "time": "Sun Feb 12 13:55:35 2012 +0100" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Wed Feb 29 17:48:31 2012 +0200" }, "message": "Bluetooth: Use NULL instead of integer for mgmt_device_connected param\n\nLast param of mgmt_device_connected is of pointer type, so use NULL\ninstead of 0 for it. This fix following sparse warning:\n\nCHECK net/bluetooth/hci_event.c\nnet/bluetooth/hci_event.c:3262:74: warning: Using plain integer as NULL pointer\n\nSigned-off-by: Szymon Janc \u003cszymon@janc.net.pl\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "426c189a1b34c0d36d5eddbe1c35bc961b1a1b68", "tree": "dfb8a00175bee1fb83b77fbeb8ac178a9583525a", "parents": [ "978c93b90fc4768e295b20492b5db76d5e026e5e" ], "author": { "name": "Andre Guedes", "email": "andre.guedes@openbossa.org", "time": "Fri Feb 24 11:41:04 2012 -0300" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Wed Feb 29 16:21:04 2012 +0200" }, "message": "Bluetooth: Change interleaved discovery behavior\n\nAccording to last discussion on IRC, if an interleaved discovery is\nissued, but the device is not dual mode, we should return error\ninstead of performing a regular BR/EDR or LE-only discovery.\n\nSigned-off-by: Andre Guedes \u003candre.guedes@openbossa.org\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "978c93b90fc4768e295b20492b5db76d5e026e5e", "tree": "075eefb9e3e711fed4f31849ef1948f6647578e7", "parents": [ "89bb46d02046b59c1de3d2e92680f3a1062750d0" ], "author": { "name": "Andrei Emeltchenko", "email": "andrei.emeltchenko@intel.com", "time": "Wed Feb 29 10:41:41 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Wed Feb 29 16:20:19 2012 +0200" }, "message": "Bluetooth: Save remote L2CAP fixed channel mask\n\nFixed channel mask needs to be stored to decide whether to\nuse A2MP for example. So far save only one relevant byte which\nkeeps all information we need.\n\nSigned-off-by: Andrei Emeltchenko \u003candrei.emeltchenko@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "89bb46d02046b59c1de3d2e92680f3a1062750d0", "tree": "dd56173e9835912f91c86e4837b1e9df9c5b30dd", "parents": [ "3379013bcfceb3c0365a3cf03543d6c67b84fc34" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@oracle.com", "time": "Tue Feb 28 09:57:59 2012 +0300" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Wed Feb 29 16:19:37 2012 +0200" }, "message": "Bluetooth: change min_t() cast in hci_reassembly()\n\n\"count\" is type int so the cast to __u16 truncates the high bits away\nand triggers a Smatch static checker warning. It looks like a high\nvalue of count could cause a forever loop, but I didn\u0027t follow it\nthrough to see if count is capped somewhere.\n\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "3379013bcfceb3c0365a3cf03543d6c67b84fc34", "tree": "f1af3dbe45673de5b444e2a19df8135bf5728512", "parents": [ "02b7cc62b6176748dc5b55e0ca9c965f73a5c300" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@oracle.com", "time": "Tue Feb 28 09:52:46 2012 +0300" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Wed Feb 29 16:18:03 2012 +0200" }, "message": "Bluetooth: use kfree_skb() instead of kfree()\n\nsk_buffs should be freed using kfree_skb().\n\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nAcked-by: Andrei Emeltchenko \u003candrei.emeltchenko@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "02b7cc62b6176748dc5b55e0ca9c965f73a5c300", "tree": "6c5029bd7637dcbe1d7fd1968c628523ad98fd7a", "parents": [ "cc2c04ec1ea8bd5137c99dc88bc04b4a07a11443" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Tue Feb 28 02:28:43 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Tue Feb 28 02:30:00 2012 +0200" }, "message": "Bluetooth: Use LMP_HOST_SSP define instead of magic values\n\nThis patch fixes the code to use the proper LMP_HOST_SSP define instead\nof magic values and thereby makes the code more readable.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "8f984dfaf0bfa1355548cfba00473c8fa8e22d6e", "tree": "7c22e24bf6e2ff7ab28bfaadf1f9da983a962827", "parents": [ "0b60eba1b29740a606e6b7694d2dc98b6085a1bf" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Tue Feb 28 01:07:22 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Tue Feb 28 01:54:19 2012 +0200" }, "message": "Bluetooth: Remove redundant read_host_features commands\n\nPreviously the write_le_enable would trigger a read_host_features\ncommand but since we have access to the value LE support was set to we\ncan simply just clear or set the bit in hdev-\u003ehost_features. This also\nremoves a second unnecessary read_host_features command from the device\ninitialization procedure since LE is only enabled after the first\nread_host_features command completes.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "0b60eba1b29740a606e6b7694d2dc98b6085a1bf", "tree": "b8e0a808062b3d8bdee50f48bcc39574a4fba3e2", "parents": [ "816a11d5ced501d368fabe09172f3d62744e8b53" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Tue Feb 28 00:57:24 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Tue Feb 28 01:52:34 2012 +0200" }, "message": "Bluetooth: Don\u0027t send unnecessary write_le_enable command\n\nIf the local host features indicate that LE is already in the state that\nis desired there\u0027s no point in sending the HCI command to try to change\nthe setting.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "816a11d5ced501d368fabe09172f3d62744e8b53", "tree": "e4f3a0879ad41c7bc06b2e8f2b65a38502c44f4f", "parents": [ "9b27f350688c9399da10c2b888c4044c2c1bd923" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Sun Feb 26 13:04:52 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Mon Feb 27 12:34:39 2012 +0200" }, "message": "Bluetooth: Use kernel int types instead of ones from stdint.h\n\nu8/__u8/u32/etc should be used in the kernel instead of stdint.h types.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "9b27f350688c9399da10c2b888c4044c2c1bd923", "tree": "fbdd090275c27a910e6b56d10f608a5ad2eb0cbf", "parents": [ "5b4cedaa14bd1fe3ca1d59c684203a6ae7747faa" ], "author": { "name": "Andrei Emeltchenko", "email": "andrei.emeltchenko@intel.com", "time": "Fri Feb 24 16:00:00 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Feb 24 20:35:02 2012 +0200" }, "message": "Bluetooth: Remove duplicated code in l2cap conn req\n\nThe same sequence sending L2CAP Connection Request was used in several\nplaces. Using subroutine makes those places easy to read.\n\nSigned-off-by: Andrei Emeltchenko \u003candrei.emeltchenko@intel.com\u003e\nReviewed-by: Ulisses Furquim \u003culisses@profusion.mobi\u003e\nAcked-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "5b4cedaa14bd1fe3ca1d59c684203a6ae7747faa", "tree": "141f050917807340e65bf5a9236d01fb5ae08755", "parents": [ "8a7a3fd680f3ea9f22fc504caf5e8e056a800401" ], "author": { "name": "Andrei Emeltchenko", "email": "andrei.emeltchenko@intel.com", "time": "Fri Feb 24 16:35:32 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Feb 24 20:32:50 2012 +0200" }, "message": "Bluetooth: Fix double locking in LE and conless chan\n\nRemove socket lock since chan-\u003eops-\u003erecv locks socket itself.\n\nSigned-off-by: Andrei Emeltchenko \u003candrei.emeltchenko@intel.com\u003e\nReviewed-by: Ulisses Furquim \u003culisses@profusion.mobi\u003e\nAcked-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "28b8df77449faa03b573638e089a855f8d25e0ed", "tree": "9a6508e56f92c9bdc43132ef3096e4ec5afa26c4", "parents": [ "3159d3843aa628b0ee9e8ef4b4fe8c935500c03f" ], "author": { "name": "Andrei Emeltchenko", "email": "andrei.emeltchenko@intel.com", "time": "Fri Feb 24 12:45:44 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Feb 24 14:02:21 2012 +0200" }, "message": "Bluetooth: Fix init request completion with AMP controllers\n\nMark request status as done for Read Local Version HCI command. In AMP\ninitialization this HCI command is the last and needs to be completed.\n\nSigned-off-by: Andrei Emeltchenko \u003candrei.emeltchenko@intel.com\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "3159d3843aa628b0ee9e8ef4b4fe8c935500c03f", "tree": "76338bc8e90d6fb38c1e11cda34efa1720db4296", "parents": [ "24b78d0f49b94f658e8bae707c158962535053dd" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Feb 24 13:47:56 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Feb 24 14:01:20 2012 +0200" }, "message": "Bluetooth: Fix init request completion with old controllers\n\nWith Bluetooth 1.1 controllers the last command in the HCI init sequence\nwill be a write_local_name, however there was no callback to indicate\ninit request completion in this case. This patch fixes the issue by\nadding the necessary callback to the write_local_name_complete handler.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "24b78d0f49b94f658e8bae707c158962535053dd", "tree": "f44e28b00ac8f811939685873d48bfd3100abd84", "parents": [ "90e704543d6702971ecfe3fe2325829d89b76f6b" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 23:24:30 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Feb 24 00:15:26 2012 +0200" }, "message": "Bluetooth: mgmt: Fix clear_uuids response\n\nSince the clear_uuids operation doesn\u0027t send an immediate HCI command\nbut just sets off a timer to wait for subsequent add_uuid calls it\ndoesn\u0027t make sense to wait until the timer fires off to send the\nresponse. Instead send the response immediately.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "90e704543d6702971ecfe3fe2325829d89b76f6b", "tree": "6c124ca14e56456ebe838003ca97e5c867c0d404", "parents": [ "c95f0ba76f902bc8b540468b695bcfe8948e8e46" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 23:09:40 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Feb 24 00:15:26 2012 +0200" }, "message": "Bluetooth: mgmt: Fix dev_class related command response timing\n\nAll mgmt commands that may fire off a hci_write_class_of_device command\nshould wait for the completion of the HCI command before sending a\nresponse to user space.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "c95f0ba76f902bc8b540468b695bcfe8948e8e46", "tree": "c5de0fe26773c40cf93cecca7554af859ecb2601", "parents": [ "08c79b6133b70a6e3d462d11a89c80259ac66ec7" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 22:54:38 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Fri Feb 24 00:15:26 2012 +0200" }, "message": "Bluetooth: mgmt: Track pending class changes\n\nThis patch adds a flag to track pending changes to the class of device.\nThis is needed since we cannot cleanly handle multiple simultaneous\ncommands and need to return a \"busy\" error status in the mgmt commands\nthat might trigger a class change.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "08c79b6133b70a6e3d462d11a89c80259ac66ec7", "tree": "b4ef15186aa7ed85f44d79310fa1d97d0e238cd3", "parents": [ "9246a8693e74b3480913cf6e0c2d472267169990" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 22:31:51 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 22:39:17 2012 +0200" }, "message": "Bluetooth: mgmt: Add flags parameter to device_connected\n\nThis patch updates the Device Connected events to match the latest API\nby adding a flags parameter to them.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "9246a8693e74b3480913cf6e0c2d472267169990", "tree": "781529875341c6a4e95babb308aae1e5115dcc68", "parents": [ "4004b6d96a14edbd157a62ae25bf61022d7caccc" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 21:33:16 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 22:02:27 2012 +0200" }, "message": "Bluetooth: mgmt: Fix clear UUIDs response\n\nWe also need to send a proper response when clearing UUIDs. This patch\nadds fixes the missing response for this use case.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "4004b6d96a14edbd157a62ae25bf61022d7caccc", "tree": "d35340b52ec5a9878ee40ead24f96b1d3774f149", "parents": [ "9997a5332320dbaaee64b5c0581ccaa6589a15c9" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 21:30:12 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 22:02:27 2012 +0200" }, "message": "Bluetooth: mgmt: Move service cache setting to a more sensible place\n\nSince we can now add UUIDs when powered off we don\u0027t really need to\nalways use the service cache to avoid large bursts of HCI commands.\nInstead, the only important use case is when we\u0027re already powered and\nuser space starts to initialize itself. This can be easiest detected by\na \"clear UUIDs\" operation which is where this patch moves the service\ncache setting.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "9997a5332320dbaaee64b5c0581ccaa6589a15c9", "tree": "8904f6e74837b2d217f96dee62ec7e88b3914d33", "parents": [ "504c8dcd6b0ec3cd36ab221695c5516e88cf3d79" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 15:57:46 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 17:01:49 2012 +0200" }, "message": "Bluetooth: mgmt: Fix return value of add/remove_uuid\n\nThe Add/Remove UUID commands should return the device class instead of\nan empty parameter list.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "504c8dcd6b0ec3cd36ab221695c5516e88cf3d79", "tree": "fcc0639d4532ffe12898d793f0383e03c5ae5101", "parents": [ "69775ff6d101ccf435bd26ae822c24bbb20e11cf" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 13:30:41 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 17:01:49 2012 +0200" }, "message": "Bluetooth: mgmt: Fix update_eir/class with HCI_AUTO_OFF flag set\n\nIf we\u0027re powered but still have the HCI_AUTO_OFF flag set the\nupdate_eir and update_class functions should not do anything.\nAdditionally these functions need to be called when the flag is finally\ncleared through set_powered or when powering on for real.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "69775ff6d101ccf435bd26ae822c24bbb20e11cf", "tree": "7e138bfb91d6aad28f879164e9b64702acad955c", "parents": [ "60fc5fb66efa0bcbe028637206ed59df8cd4ac19" ], "author": { "name": "Andre Guedes", "email": "andre.guedes@openbossa.org", "time": "Thu Feb 23 16:50:05 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 16:51:47 2012 +0200" }, "message": "Bluetooth: Set DISCOVERY_STOPPED if controller resets\n\nIf controller is reset during the discovery procedure, Start Discovery\ncommand stops working. This can be easily reproduced by running\n\"hciconfig hci0 reset\" while discovering devices, for instance.\n\nWe should force discovery state to DISCOVERY_STOPPED in case we receive\na reset command complete event. Otherwise we may stuck in one of the\nactive discovery states (DISCOVERY_INQUIRY, DISCOVERY_LE_SCAN and\nDISCOVERY_RESOLVING) and subsequent Start Discovery commands will simply\nfail.\n\nSigned-off-by: Andre Guedes \u003candre.guedes@openbossa.org\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "60fc5fb66efa0bcbe028637206ed59df8cd4ac19", "tree": "a44a49c3003eb7377e1428c276e26895cb029c41", "parents": [ "b3fb611ec7b76048cb14600e9a5a9b57e5d913da" ], "author": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 09:52:28 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 13:07:02 2012 +0200" }, "message": "Bluetooth: mgmt: Fix count parameter in get_connections reply\n\nThis patch fixes the count parameter in the Get Connections reply\nmessage. We cannot know the right number until iterating through all\nconnections so set the parameter value only after the loop.\n\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n" }, { "commit": "b3fb611ec7b76048cb14600e9a5a9b57e5d913da", "tree": "a95447000d733686ff915dcd58d650140541f252", "parents": [ "6be3655552ee49aa2b5fd20fa1b08f28d0feac86" ], "author": { "name": "Andrei Emeltchenko", "email": "andrei.emeltchenko@intel.com", "time": "Wed Feb 22 17:11:57 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 13:07:02 2012 +0200" }, "message": "Bluetooth: Remove socket lock check\n\nSimplify code so that we do not need to check whether socket is locked.\n\nSigned-off-by: Andrei Emeltchenko \u003candrei.emeltchenko@intel.com\u003e\nAcked-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "6be3655552ee49aa2b5fd20fa1b08f28d0feac86", "tree": "921d44bd7d1ca85df0b36113dec274b269d575f2", "parents": [ "643162a8e2c15a1c1983a0063d9941240b3bde30" ], "author": { "name": "Andrei Emeltchenko", "email": "andrei.emeltchenko@intel.com", "time": "Wed Feb 22 17:11:56 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 13:07:02 2012 +0200" }, "message": "Bluetooth: Change sk lock to chan lock in L2CAP core\n\nChange sk lock to chan lock in l2cap core and move sk locks\nto l2cap sock code. bh_locks were used because of being RCU\ncritical section. When needed use explicit socket locks.\n\nSigned-off-by: Andrei Emeltchenko \u003candrei.emeltchenko@intel.com\u003e\nReviewed-by: Ulisses Furquim \u003culisses@profusion.mobi\u003e\nAcked-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" }, { "commit": "643162a8e2c15a1c1983a0063d9941240b3bde30", "tree": "0b21ed045654d47f055d249b265f59c4ab3e87d6", "parents": [ "388fc8faf200f80159353eb86cde4ab75d0a0bbd" ], "author": { "name": "Andrei Emeltchenko", "email": "andrei.emeltchenko@intel.com", "time": "Wed Feb 22 17:11:55 2012 +0200" }, "committer": { "name": "Johan Hedberg", "email": "johan.hedberg@intel.com", "time": "Thu Feb 23 13:07:02 2012 +0200" }, "message": "Bluetooth: Add unlocked __l2cap_chan_add function\n\nAdd unlocked L2CAP channel add function. Unlocked version will\nbe used in later patches.\n\nSigned-off-by: Andrei Emeltchenko \u003candrei.emeltchenko@intel.com\u003e\nReviewed-by: Ulisses Furquim \u003culisses@profusion.mobi\u003e\nAcked-by: Gustavo F. Padovan \u003cpadovan@profusion.mobi\u003e\nSigned-off-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\n" } ], "next": "388fc8faf200f80159353eb86cde4ab75d0a0bbd" }