Lin Ma 1b1499a817 nfc: nci: fix the UAF of rf_conn_info object ...

The nci_core_conn_close_rsp_packet() function will release the conn_info
with given conn_id. However, it needs to set the rf_conn_info to NULL to
prevent other routines like nci_rf_intf_activated_ntf_packet() to trigger
the UAF.

Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
Signed-off-by: Lin Ma <linma@zju.edu.cn>
Signed-off-by: Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2021-10-08 17:24:32 +01:00

..

core.c

nfc: hci: pass callback data param as pointer in nci_request()

2021-08-02 15:11:37 +01:00

data.c

nfc: nci: constify several pointers to u8, sk_buff and other structs

2021-07-30 17:22:52 +02:00

hci.c

nfc: hci: pass callback data param as pointer in nci_request()

2021-08-02 15:11:37 +01:00

Kconfig

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00

lib.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 234

2019-06-19 17:09:07 +02:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

ntf.c

nfc: hci: cleanup unneeded spaces

2021-07-30 17:22:53 +02:00

rsp.c

nfc: nci: fix the UAF of rf_conn_info object

2021-10-08 17:24:32 +01:00

spi.c

nfc: nci: constify several pointers to u8, sk_buff and other structs

2021-07-30 17:22:52 +02:00

uart.c

tty: make tty_ldisc_ops a param in tty_unregister_ldisc

2021-05-13 16:57:16 +02:00