kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-11-10 20:48:12 +00:00
Code Issues Releases Packages Activity
linux/drivers/nfc/nfcmrvl
History
Pengpeng Hou 686f942332
 nfc: nfcmrvl: validate helper command length before pull 
The firmware download receive path removes the NCI data header and
reads the helper command before validating the remaining packet length.
A short frame can therefore reach the data access before the malformed
packet is rejected.

Validate the complete helper command length before stripping the NCI
data header.

Fixes: 3194c68701 ("NFC: nfcmrvl: add firmware download support")
Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Link: https://patch.msgid.link/20260715084325.40276-1-pengpeng@iscas.ac.cn
Signed-off-by: David Heidelberg <david@ixit.cz>
History 2026-09-23 22:13:15 +02:00
..
fw_dnld.c nfc: nfcmrvl: validate helper command length before pull 2026-09-23 22:13:15 +02:00
fw_dnld.h nfc: mrvl: use SPDX-License-Identifier 2021-05-31 21:31:09 -07:00
i2c.c nfc: Unify style of of_device_id arrays 2026-08-11 18:14:00 +02:00
Kconfig nfc: Fix Kconfig indentation 2019-11-20 12:30:40 -08:00
main.c nfc: nfcmrvl: convert to gpio descriptors 2026-03-09 10:25:34 +01:00
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
nfcmrvl.h nfc: nfcmrvl: convert to gpio descriptors 2026-03-09 10:25:34 +01:00
spi.c nfc: Initialize spi_device_idarrays using member names 2026-08-11 18:14:00 +02:00
uart.c nfc: nfcmrvl: convert to gpio descriptors 2026-03-09 10:25:34 +01:00
usb.c nfc: Unify style of usb_device_id arrays 2026-08-11 18:14:01 +02:00