Dan Carpenter d5a461c315 NFC: nci: Add bounds checking in nci_hci_create_pipe() ... commit 110b43ef05342d5a11284cc8b21582b698b4ef1c upstream. The "pipe" variable is a u8 which comes from the network. If it's more than 127, then it results in memory corruption in the caller, nci_hci_connect_gate(). Cc: stable@vger.kernel.org Fixes: a1b0b94158 ("NFC: nci: Create pipe on specific gate in nci_hci_connect_gate") Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org> Reviewed-by: Simon Horman <horms@kernel.org> Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org> Link: https://patch.msgid.link/bcf5453b-7204-4297-9c20-4d8c7dacf586@stanley.mountain Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2025-02-21 13:49:51 +01:00
..
hci
nci	NFC: nci: Add bounds checking in nci_hci_create_pipe()	2025-02-21 13:49:51 +01:00
af_nfc.c
core.c
digital_core.c
digital_dep.c
digital_technology.c
digital.h
Kconfig
llcp_commands.c
llcp_core.c	nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local	2024-01-10 17:10:22 +01:00
llcp_sock.c	nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies	2024-11-22 15:37:33 +01:00
llcp.h
Makefile
netlink.c
nfc.h
rawsock.c