Dan Carpenter 110b43ef05 NFC: nci: Add bounds checking in nci_hci_create_pipe() ... The "pipe" variable is a u8 which comes from the network. If it's more than 127, then it results in memory corruption in the caller, nci_hci_connect_gate(). Cc: stable@vger.kernel.org Fixes: a1b0b94158 ("NFC: nci: Create pipe on specific gate in nci_hci_connect_gate") Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org> Reviewed-by: Simon Horman <horms@kernel.org> Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org> Link: https://patch.msgid.link/bcf5453b-7204-4297-9c20-4d8c7dacf586@stanley.mountain Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2025-01-22 19:39:27 -08:00
..
hci	nfc: hci: Save a few bytes of memory when registering a 'nfc_llc' engine	2024-02-06 15:36:06 +01:00
nci	NFC: nci: Add bounds checking in nci_hci_create_pipe()	2025-01-22 19:39:27 -08:00
af_nfc.c
core.c	nfc: core: make nfc_class constant	2024-03-05 11:21:18 -08:00
digital.h
digital_core.c	net: fill in MODULE_DESCRIPTION()s for NFC	2024-01-11 16:16:08 -08:00
digital_dep.c
digital_technology.c
Kconfig
llcp.h	net: nfc: Fix use-after-free caused by nfc_llcp_find_local	2023-06-26 10:57:23 +01:00
llcp_commands.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-06-27 09:45:22 -07:00
llcp_core.c	nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local	2023-12-25 07:29:04 +00:00
llcp_sock.c	net: change proto and proto_ops accept type	2024-05-13 18:19:09 -06:00
Makefile
netlink.c	net: nfc: Propagate ISO14443 type A target ATS to userspace via netlink	2024-11-07 10:21:58 +01:00
nfc.h	net: nfc: Fix use-after-free caused by nfc_llcp_find_local	2023-06-26 10:57:23 +01:00
rawsock.c	nfc: Add KCOV annotations	2022-11-02 11:58:13 +00:00