diff options
| author | Dan Carpenter <dan.carpenter@linaro.org> | 2025-01-17 12:38:41 +0300 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2025-01-23 06:39:27 +0300 |
| commit | 110b43ef05342d5a11284cc8b21582b698b4ef1c (patch) | |
| tree | bd36b4b8fae44e955bd12e210459a11a352358e3 /scripts/gdb/linux/proc.py | |
| parent | d62b04fca4340a0d468d7853bd66e511935a18cb (diff) | |
| download | linux-110b43ef05342d5a11284cc8b21582b698b4ef1c.tar.xz | |
NFC: nci: Add bounds checking in nci_hci_create_pipe()
The "pipe" variable is a u8 which comes from the network. If it's more
than 127, then it results in memory corruption in the caller,
nci_hci_connect_gate().
Cc: stable@vger.kernel.org
Fixes: a1b0b9415817 ("NFC: nci: Create pipe on specific gate in nci_hci_connect_gate")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Reviewed-by: Simon Horman <horms@kernel.org>
Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org>
Link: https://patch.msgid.link/bcf5453b-7204-4297-9c20-4d8c7dacf586@stanley.mountain
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'scripts/gdb/linux/proc.py')
0 files changed, 0 insertions, 0 deletions