Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Michael Thalmeier 3b91160e9a net: nfc: nci: Fix parameter validation for packet data ... [ Upstream commit 571dcbeb8e ] Since commit 9c328f5474 ("net: nfc: nci: Add parameter validation for packet data") communication with nci nfc chips is not working any more. The mentioned commit tries to fix access of uninitialized data, but failed to understand that in some cases the data packet is of variable length and can therefore not be compared to the maximum packet length given by the sizeof(struct). Fixes: 9c328f5474 ("net: nfc: nci: Add parameter validation for packet data") Cc: stable@vger.kernel.org Signed-off-by: Michael Thalmeier <michael.thalmeier@hale.at> Reported-by: syzbot+740e04c2a93467a0f8c8@syzkaller.appspotmail.com Link: https://patch.msgid.link/20260218083000.301354-1-michael.thalmeier@hale.at Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		History 2026-03-04 07:21:59 -05:00
..
core.c	nfc: nci: Fix race between rfkill and nci_unregister_device().	2026-02-06 16:55:42 +01:00
data.c	NFC: nci: fix memory leak in nci_rx_data_packet()	2022-11-22 12:42:23 +01:00
hci.c	NFC: nci: Add bounds checking in nci_hci_create_pipe()	2025-02-17 10:05:40 +01:00
Kconfig	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
lib.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 234	2019-06-19 17:09:07 +02:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
ntf.c	net: nfc: nci: Fix parameter validation for packet data	2026-03-04 07:21:59 -05:00
rsp.c	nfc: nci: fix the UAF of rf_conn_info object	2021-10-08 17:24:32 +01:00
spi.c	net: fill in MODULE_DESCRIPTION()s for NFC	2024-01-11 16:16:08 -08:00
uart.c	NFC: nci: uart: Set tty->disc_data only in success path	2025-06-27 11:11:21 +01:00