Dan Carpenter 110b43ef05 NFC: nci: Add bounds checking in nci_hci_create_pipe() ... The "pipe" variable is a u8 which comes from the network. If it's more than 127, then it results in memory corruption in the caller, nci_hci_connect_gate(). Cc: stable@vger.kernel.org Fixes: a1b0b94158 ("NFC: nci: Create pipe on specific gate in nci_hci_connect_gate") Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org> Reviewed-by: Simon Horman <horms@kernel.org> Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org> Link: https://patch.msgid.link/bcf5453b-7204-4297-9c20-4d8c7dacf586@stanley.mountain Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2025-01-22 19:39:27 -08:00
..
core.c	net: nfc: Propagate ISO14443 type A target ATS to userspace via netlink	2024-11-07 10:21:58 +01:00
data.c	NFC: nci: fix memory leak in nci_rx_data_packet()	2022-11-22 12:42:23 +01:00
hci.c	NFC: nci: Add bounds checking in nci_hci_create_pipe()	2025-01-22 19:39:27 -08:00
Kconfig	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
lib.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 234	2019-06-19 17:09:07 +02:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
ntf.c	net: nfc: Propagate ISO14443 type A target ATS to userspace via netlink	2024-11-07 10:21:58 +01:00
rsp.c	nfc: nci: fix the UAF of rf_conn_info object	2021-10-08 17:24:32 +01:00
spi.c	net: fill in MODULE_DESCRIPTION()s for NFC	2024-01-11 16:16:08 -08:00
uart.c	tty: ldops: unify to u8	2023-08-11 21:12:47 +02:00