21.0.0: Difference between revisions
No edit summary |
|||
| Line 389: | Line 389: | ||
** The kernel-use of KDynamicSlabHeapPageAllocator::Initialize in resource manager init now panics on failure | ** The kernel-use of KDynamicSlabHeapPageAllocator::Initialize in resource manager init now panics on failure | ||
** There are more cases, too many to fully enumerate with high confidence. | ** There are more cases, too many to fully enumerate with high confidence. | ||
=== [[Bluetooth_Driver_services|bluetooth]] === | |||
The below changes for gatt_process_prep_write_rsp and gatt_process_notification were also backported to [[19.0.2]]. | |||
* Updated L_c6720, prev ver @ L_c0cc0. This is gatt_process_prep_write_rsp. | |||
** The input size is now [[Switch_System_Flaws|validated]]. The validation is implemented as: <code>if (0xFDA6 >= (u16)(size-0x25D)) <fail></code> | |||
* Updated L_c6930, prev ver @ L_c0eb0. This is gatt_process_notification. | |||
** The input size bounds check was moved before writing any data to stack, and the bounds check was updated (same as gatt_process_prep_write_rsp above). | |||
** These changes shouldn't matter? The stack data is only used when the bounds check passes, and the previous check also would catch wrap-around. | |||
* ... | |||
=== [[HID_services|hid]] === | === [[HID_services|hid]] === | ||