Kees Cook 50e54d5674 NFC: llcp: Limit size of SDP URI ...

[ Upstream commit fe9c842695 ]

The tlv_len is u8, so we need to limit the size of the SDP URI. Enforce
this both in the NLA policy and in the code that performs the allocation
and copy, to avoid writing past the end of the allocated buffer.

Fixes: d9b8d8e19b ("NFC: llcp: Service Name Lookup netlink interface")
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-05-30 07:48:59 +02:00

..

hci

NFC: st21nfca: Add support for proprietary commands

2015-10-27 04:00:24 +01:00

nci

NFC: fix broken device allocation

2017-07-27 15:06:03 -07:00

af_nfc.c

net: Pass kern from net_proto_family.create to sk_alloc

2015-05-11 10:50:17 -04:00

core.c

NFC: fix device-allocation error return

2017-11-30 08:37:23 +00:00

digital_core.c

NFC: netlink: Add mode parameter to deactivate_target functions

2015-10-27 03:55:12 +01:00

digital_dep.c

NFC: digital: Add NFC-DEP Target-side ATN Support

2014-11-28 12:40:38 +01:00

digital_technology.c

NFC: digital: Add 'tg_listen_md' and 'tg_get_rf_tech' driver hooks

2014-07-23 01:17:31 +02:00

digital.h

NFC: digital: Add 'tg_listen_md' and 'tg_get_rf_tech' driver hooks

2014-07-23 01:17:31 +02:00

Kconfig

NFC Digital: Add NFC-F technology support

2013-09-25 02:02:25 +02:00

llcp_commands.c

NFC: llcp: Limit size of SDP URI

2018-05-30 07:48:59 +02:00

llcp_core.c

net: Pass kern from net_proto_family.create to sk_alloc

2015-05-11 10:50:17 -04:00

llcp_sock.c

NFC: Add sockaddr length checks before accessing sa_family in bind handlers

2017-07-27 15:06:03 -07:00

llcp.h

net: Pass kern from net_proto_family.create to sk_alloc

2015-05-11 10:50:17 -04:00

Makefile

NFC Digital: Add initiator NFC-DEP support

2013-09-25 02:02:27 +02:00

netlink.c

NFC: llcp: Limit size of SDP URI

2018-05-30 07:48:59 +02:00

nfc.h

NFC: netlink: Add mode parameter to deactivate_target functions

2015-10-27 03:55:12 +01:00

rawsock.c

NFC: netlink: Add mode parameter to deactivate_target functions

2015-10-27 03:55:12 +01:00