)]}'
{
  "commit": "b4066eb04bb67e7ff66e5aaab0db4a753f37eaad",
  "tree": "d61efcf01928bd39250474f280ea9b14be4795ad",
  "parents": [
    "de6dfcefd107667ce2dbedf4d9337f5ed557a4a1"
  ],
  "author": {
    "name": "Siddh Raman Pant",
    "email": "code@siddh.me",
    "time": "Tue Jul 11 18:43:53 2023 +0530"
  },
  "committer": {
    "name": "Luiz Augusto von Dentz",
    "email": "luiz.von.dentz@intel.com",
    "time": "Thu Jul 20 11:26:56 2023 -0700"
  },
  "message": "Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link\n\nhci_connect_sco currently returns NULL when there is no link (i.e. when\nhci_conn_link() returns NULL).\n\nsco_connect() expects an ERR_PTR in case of any error (see line 266 in\nsco.c). Thus, hcon set as NULL passes through to sco_conn_add(), which\ntries to get hcon-\u003ehdev, resulting in dereferencing a NULL pointer as\nreported by syzkaller.\n\nThe same issue exists for iso_connect_cis() calling hci_connect_cis().\n\nThus, make hci_connect_sco() and hci_connect_cis() return ERR_PTR\ninstead of NULL.\n\nReported-and-tested-by: syzbot+37acd5d80d00d609d233@syzkaller.appspotmail.com\nCloses: https://syzkaller.appspot.com/bug?extid\u003d37acd5d80d00d609d233\nFixes: 06149746e720 (\"Bluetooth: hci_conn: Add support for linking multiple hcon\")\nSigned-off-by: Siddh Raman Pant \u003ccode@siddh.me\u003e\nSigned-off-by: Luiz Augusto von Dentz \u003cluiz.von.dentz@intel.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "db598942cab470cd41a2092b80ab2ea697a3687b",
      "old_mode": 33188,
      "old_path": "net/bluetooth/hci_conn.c",
      "new_id": "76222565e2df0c9818e604c7542f192aabd31e17",
      "new_mode": 33188,
      "new_path": "net/bluetooth/hci_conn.c"
    }
  ]
}