]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ddc9260) | patch
NFC: llcp: Limit size of SDP URI
authorKees Cook <keescook@chromium.org>
Wed, 14 Feb 2018 23:45:07 +0000 (15:45 -0800)
committerDavid S. Miller <davem@davemloft.net>
Fri, 16 Feb 2018 20:16:05 +0000 (15:16 -0500)
commit2c2c29410f791bf804973418c202f84a7996d2e7
tree4290060a267efbab9953477c6e8a0e5751be97e2tree | snapshot
parentddc92606945c5cb00fc3a694bdaedc0ebb60d591commit | diff
NFC: llcp: Limit size of SDP URI

The tlv_len is u8, so we need to limit the size of the SDP URI. Enforce
this both in the NLA policy and in the code that performs the allocation
and copy, to avoid writing past the end of the allocated buffer.

Fixes: 733a9d107c0a1 ("NFC: llcp: Service Name Lookup netlink interface")
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/nfc/llcp_commands.c diff | blob | history
net/nfc/netlink.c diff | blob | history
Linux Kernel Source Tree.