Files
RetroArch/bluetooth
Acts1631 f20adf39f8 bluetoothctl: validate addresses from device listings (#19651)
A nearby Bluetooth name can contain a newline that forges a line in
bluetoothctl devices output. The next status check or a connect action
used the forged line's second token in a popen() command, allowing
shell commands to run as the RetroArch user.

Accept only lines with a valid Bluetooth address, use that address
for status, connect, and remove commands, and cap the list to the
fixed status arrays.
2026-10-01 05:19:08 +02:00
..