iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
0edf0824e0
linux/net/nfc
History
Lin Ma 1b1499a817 nfc: nci: fix the UAF of rf_conn_info object 
The nci_core_conn_close_rsp_packet() function will release the conn_info
with given conn_id. However, it needs to set the rf_conn_info to NULL to
prevent other routines like nci_rf_intf_activated_ntf_packet() to trigger
the UAF.

Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
Signed-off-by: Lin Ma <linma@zju.edu.cn>
Signed-off-by: Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2021-10-08 17:24:32 +01:00
..
hci nfc: constify local pointer variables 2021-07-30 17:22:52 +02:00
nci nfc: nci: fix the UAF of rf_conn_info object 2021-10-08 17:24:32 +01:00
af_nfc.c nfc: annotate af_nfc_exit() as __exit 2021-07-30 17:22:51 +02:00
core.c nfc: constify local pointer variables 2021-07-30 17:22:52 +02:00
digital_core.c nfc: constify nfc_digital_ops 2021-07-25 09:21:21 +01:00
digital_dep.c net:nfc:digital: Fix a double free in digital_tg_recv_dep_req 2021-04-27 15:36:10 -07:00
digital_technology.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 288 2019-06-05 17:36:37 +02:00
digital.h treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 288 2019-06-05 17:36:37 +02:00
Kconfig net: remove redundant 'depends on NET' 2021-01-27 17:04:12 -08:00
llcp_commands.c nfc: constify several pointers to u8, char and sk_buff 2021-07-30 17:22:52 +02:00
llcp_core.c nfc: constify several pointers to u8, char and sk_buff 2021-07-30 17:22:52 +02:00
llcp_sock.c nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect 2021-05-31 22:43:27 -07:00
llcp.h nfc: constify several pointers to u8, char and sk_buff 2021-07-30 17:22:52 +02:00
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
netlink.c nfc: constify local pointer variables 2021-07-30 17:22:52 +02:00
nfc.h nfc: constify several pointers to u8, char and sk_buff 2021-07-30 17:22:52 +02:00
rawsock.c net: in_irq() cleanup 2021-08-13 14:09:19 -07:00