Message ID | 1451928815-3293-1-git-send-email-luis.henriques@canonical.com |
---|---|
State | New |
Headers | show |
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c index dbbbc0292bd0..f9cd2e1e1635 100644 --- a/net/bluetooth/sco.c +++ b/net/bluetooth/sco.c @@ -459,6 +459,9 @@ static int sco_sock_bind(struct socket *sock, struct sockaddr *addr, int addr_le if (!addr || addr->sa_family != AF_BLUETOOTH) return -EINVAL; + if (addr_len < sizeof(struct sockaddr_sco)) + return -EINVAL; + lock_sock(sk); if (sk->sk_state != BT_OPEN) {