Branch: refs/heads/master Home: https://github.com/bluez/bluez Commit: f77ed4911e01a43659d2daaa3724450489f6126b https://github.com/bluez/bluez/commit/f77ed4911e01a43659d2daaa3724450489f6126b Author: Arkadiusz Bokowy <arkadiusz.bokowy@xxxxxxxxx> Date: 2025-03-03 (Mon, 03 Mar 2025) Changed paths: M src/uuid-helper.c Log Message: ----------- uuid-helper: Accept any 16-bit HEX value as a valid UUID The bt_name2string() function restricts HEX values to the list of predefined service names. This list is very limited, so loosing that restriction will allow to pass any 16-bit HEX value as a profile to D-Bus API calls like ConnectProfile or RegisterProfile. Commit: 32e2e5a42b2b51b7a196de0b5bd199eeb5ce4725 https://github.com/bluez/bluez/commit/32e2e5a42b2b51b7a196de0b5bd199eeb5ce4725 Author: Arkadiusz Bokowy <arkadiusz.bokowy@xxxxxxxxx> Date: 2025-03-03 (Mon, 03 Mar 2025) Changed paths: M src/device.c M src/profile.c Log Message: ----------- core: Report error in case of bt_name2string failure Commit: 8479c279ea937c12b3091900c2783ca03e468542 https://github.com/bluez/bluez/commit/8479c279ea937c12b3091900c2783ca03e468542 Author: Roman Smirnov <r.smirnov@xxxxxx> Date: 2025-03-03 (Mon, 03 Mar 2025) Changed paths: M client/main.c Log Message: ----------- client: add input validation to main() An error was found during fuzzing testing. When passing Unicode characters to bluetoothctl the application crashes in dbus: dbus[5324]: arguments to dbus_message_iter_append_basic() were incorrect, assertion "_dbus_check_is_valid_utf8 (*string_p)" failed in file .../dbus-message.c line 2765. Check that all characters are written in utf8. Fixes: https://github.com/bluez/bluez/issues/1118 Compare: https://github.com/bluez/bluez/compare/711424319562...8479c279ea93 To unsubscribe from these emails, change your notification settings at https://github.com/bluez/bluez/settings/notifications