]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 82c5cd2) | patch
NFC: llcp: Limit size of SDP URI
authorKees Cook <keescook@chromium.org>
Wed, 14 Feb 2018 23:45:07 +0000 (15:45 -0800)
committerDavid S. Miller <davem@davemloft.net>
Fri, 16 Feb 2018 20:16:05 +0000 (15:16 -0500)
commit1357bab4b26d0ca4efc56d46ff9a94caacd8510b
tree4290060a267efbab9953477c6e8a0e5751be97e2tree | snapshot
parent82c5cd23666991cbe3ae316efae4acb5fb961280commit | diff
NFC: llcp: Limit size of SDP URI

The tlv_len is u8, so we need to limit the size of the SDP URI. Enforce
this both in the NLA policy and in the code that performs the allocation
and copy, to avoid writing past the end of the allocated buffer.

Fixes: f6b990c3c8eaf ("NFC: llcp: Service Name Lookup netlink interface")
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/nfc/llcp_commands.c diff | blob | history
net/nfc/netlink.c diff | blob | history
Linux Kernel Source Tree.