From: Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> This set ensures events received have the minimum required length using skb_pull to advance on packet, it also rework some of events to take advantage flex_array_size for events that can have variable size. This should fix issues found by szybot like: [syzbot] KMSAN: uninit-value in hci_event_packet Luiz Augusto von Dentz (10): Bluetooth: HCI: Use skb_pull to parse BR/EDR events Bluetooth: HCI: Use skb_pull to parse Command Complete event Bluetooth: HCI: Use skb_pull to parse Number of Complete Packets event Bluetooth: HCI: Use skb_pull to parse Inquiry Result event Bluetooth: HCI: Use skb_pull to parse Inquiry Result with RSSI event Bluetooth: HCI: Use skb_pull to parse Extended Inquiry Result event Bluetooth: HCI: Use skb_pull to parse LE Metaevents Bluetooth: HCI: Use skb_pull to parse LE Advertising Report event Bluetooth: HCI: Use skb_pull to parse LE Extended Advertising Report event Bluetooth: HCI: Use skb_pull to parse LE Direct Advertising Report event include/net/bluetooth/hci.h | 59 +- net/bluetooth/hci_event.c | 1312 +++++++++++++++++++++++++++-------- 2 files changed, 1052 insertions(+), 319 deletions(-) -- 2.30.2