Hi, On Sat, Mar 30, 2019 at 2:23 AM Tomas Bortoli <tomasbortoli@xxxxxxxxx> wrote: > > Hi Dan, > > On 3/30/19 8:25 AM, Dan Carpenter wrote: > > There is a potential out of bounds if "ev->length" is too high or if the > > number of reports are too many. > > > > Fixes: c215e9397b00 ("Bluetooth: Process extended ADV report event") > > Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx> > Reviewed-By: Tomas Bortoli <tomasbortoli@xxxxxxxxx> I sent a patchset to fix all of this kind of OOB: https://marc.info/?l=linux-netdev&m=155314874622831&w=2 Unfortunately I get no response... Does any of you mind to look at them? Thanks.