Jordy Zomer 25c23fe40e nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION ...

commit 4fbcc1a4cb20fe26ad0225679c536c80f1648221 upstream.

It appears that there are some buffer overflows in EVT_TRANSACTION.
This happens because the length parameters that are passed to memcpy
come directly from skb->data and are not guarded in any way.

Signed-off-by: Jordy Zomer <jordy@pwning.systems>
Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Denis Efremov <denis.e.efremov@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-03-28 09:57:07 +02:00

..

fdp

treewide: replace '---help---' in Kconfig files with 'help'

2020-06-14 01:57:21 +09:00

microread

treewide: replace '---help---' in Kconfig files with 'help'

2020-06-14 01:57:21 +09:00

nfcmrvl

…

nxp-nci

treewide: replace '---help---' in Kconfig files with 'help'

2020-06-14 01:57:21 +09:00

pn533

nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails

2021-11-18 14:04:27 +01:00

pn544

treewide: replace '---help---' in Kconfig files with 'help'

2020-06-14 01:57:21 +09:00

s3fwrn5

nfc: s3fwrn5: Release the nfc firmware

2020-12-30 11:53:53 +01:00

st21nfca

nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION

2022-03-28 09:57:07 +02:00

st95hf

NFC: st95hf: Fix memleak in st95hf_in_send_cmd

2020-08-24 17:34:25 -07:00

st-nci

nfc: st-nci: Remove unnecessary cast

2020-08-20 16:17:45 -07:00

Kconfig

…

Makefile

…

mei_phy.c

…

mei_phy.h

…

nfcsim.c

nfc: nfcsim: fix use after free during module unload

2021-08-04 12:46:41 +02:00

port100.c

NFC: port100: fix use-after-free in port100_send_complete

2022-03-16 14:15:59 +01:00

trf7970a.c

nfc: remove unneeded break

2020-10-20 10:36:41 -07:00