tree 342531410aa6985decfc173e3bf892d7b4ec47e8
parent c849edbdc2fc3a9ba37ae6810d7a1e2c92b302d7
author David Herrmann <dh.herrmann@gmail.com> 1365166654 +0200
committer Gustavo Padovan <gustavo.padovan@collabora.co.uk> 1365216254 -0300

Bluetooth: hidp: verify l2cap sockets

We need to verify that the given sockets actually are l2cap sockets. If
they aren't, we are not supposed to access bt_sk(sock) and we shouldn't
start the session if the offsets turn out to be valid local BT addresses.

That is, if someone passes a TCP socket to HIDCONNADD, then we access some
random offset in the TCP socket (which isn't even guaranteed to be valid).

Fix this by checking that the socket is an l2cap socket.

Signed-off-by: David Herrmann <dh.herrmann@gmail.com>
Acked-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Gustavo Padovan <gustavo.padovan@collabora.co.uk>