)]}'
{
  "commit": "4b837ebd0ea21ae5cc26f02dc042edc6fe7b46b9",
  "tree": "29a3afd91dcfe11acc1a589d2e3224e9a33e2cee",
  "parents": [
    "6610c6fe4b8936c232048e6049bf77c70a6f759c"
  ],
  "author": {
    "name": "Chandrashekar Devegowda",
    "email": "chandrashekar.devegowda@intel.com",
    "time": "Tue Sep 08 15:26:58 2026 +0530"
  },
  "committer": {
    "name": "Luiz Augusto von Dentz",
    "email": "luiz.von.dentz@intel.com",
    "time": "Tue Sep 15 14:49:34 2026 -0400"
  },
  "message": "Bluetooth: btintel_pcie: validate TX skb length in send_sync\n\nbtintel_pcie_prepare_tx() copies skb-\u003elen bytes into a fixed\nBTINTEL_PCIE_BUFFER_SIZE (4096) DMA slot via an unchecked memcpy.\nOversized packets are currently rejected only in\nbtintel_pcie_send_frame(); any future caller of\nbtintel_pcie_send_sync() would silently overflow the DMA buffer.\n\nAdd the bounds check in btintel_pcie_send_sync() itself, right\nbefore skb_push() and the DMA copy.\n\nAssisted-by: Copilot:claude-sonnet-5 code-review code-generation\nFixes: 6e65a09f9275 (\"Bluetooth: btintel_pcie: Add *setup* function to download firmware\")\nSigned-off-by: Chandrashekar Devegowda \u003cchandrashekar.devegowda@intel.com\u003e\nSigned-off-by: Luiz Augusto von Dentz \u003cluiz.von.dentz@intel.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "6d9649776ae78954f54f23d66de37e4e1c869be3",
      "old_mode": 33188,
      "old_path": "drivers/bluetooth/btintel_pcie.c",
      "new_id": "405b23e21473599a44ea236181b22b5746270070",
      "new_mode": 33188,
      "new_path": "drivers/bluetooth/btintel_pcie.c"
    }
  ]
}