APPLIED[J+M]: [SRU][J][PATCH 0/1] Cherry-pick a patch to reject connection when malformed L2CAP signal packet is received

[Stefan Bader]

On 09.01.24 04:07, Hui Wang wrote:
> BugLink: https://bugs.launchpad.net/bugs/2047634
> 
> The patch is merged in mainline kernel v6.7-rc7, so Noble kernel
> already have this fix. And this patch is CCed to stable at vger.kernel.org,
> M and L kernel will have this fix with the SRU update sooner or later.
> For Jammy kernel, an OEM customer is waiting for this patch
> to be merged to Jammy kernel and OEM kernel, here I submit the
> review reqeust for Jammy only.
> 
> [Impact]
> An OEM customer want to do the bluetooth profile testing suite (PTS)
> test, and they found if sending 2 commands and one of them is "unknown
> comands", the bluetooth stack doesn't reply the ack as expected, this
> broke the customer's PTS test.
> 
> [Fix]
> Cherry-pick a mainline kernel patch, this could fix this issue.
> 
> [Test]
> After applying the patch, test it with PTS:
> 
> 1. Configure the PTS: set PSM to 0x1011, so that it initiates L2CAP connection
>     over PSM 0x1011, which is the default PSM for l2test, the testing tool for
>     L2CAP layer provided by bluez.
> 
> 2. Set device as connectable:
>   $ sudo btmgmt connectable on
> 
> 3. Run l2test on the device in preparation for testing:
>   $ sudo l2test -d
> 
> 4. Run the L2CAP/COS/CED/BI-02-C test on PTS. The test suite will initiate
>     L2CAP connection automatically.
> 
> 5. Verify that the test verdict on the PTS is PASS.
> 
> And I also tested the patched kernel with 2 bt headsets, 1 bt keyboard and
> my mobile phone, all worked as well as before.
> 
> [Where problems could occur]
> This makes L2CAP implementation more conforming to the specification.
> It has possibility to make some bt devices could not work with patched
> kernel, but this possibility is very low, I tested the patched kernel
> with 2 bt headsets, 1 bt keyboard and my Android mobile phone, all
> worked as well as before.
> 
> 
> Frédéric Danis (1):
>    Bluetooth: L2CAP: Send reject on command corrupted request
> 
>   net/bluetooth/l2cap_core.c | 21 +++++++++++++++------
>   1 file changed, 15 insertions(+), 6 deletions(-)
> 

Applied to mantic,jammy:linux/master-next. Thanks.

-Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 48643 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240124/8317d40a/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240124/8317d40a/attachment-0001.sig>