Kees Cook fe9c842695 NFC: llcp: Limit size of SDP URI ...

The tlv_len is u8, so we need to limit the size of the SDP URI. Enforce
this both in the NLA policy and in the code that performs the allocation
and copy, to avoid writing past the end of the allocated buffer.

Fixes: d9b8d8e19b073 ("NFC: llcp: Service Name Lookup netlink interface")
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

2018-02-16 15:16:05 -05:00

..

hci

NFC: Convert timers to use timer_setup()

2017-11-06 01:12:10 +01:00

nci

net: annotate ->poll() instances

2017-11-27 16:20:04 -05:00

af_nfc.c

net: socket: mark socket protocol handler structs as const

2017-05-16 11:54:07 -04:00

core.c

NFC: Convert timers to use timer_setup()

2017-11-06 01:12:10 +01:00

digital_core.c

NFC: digital: Abort cmd when deactivating target

2017-11-10 00:03:39 +01:00

digital_dep.c

NFC: digital: NFC-DEP Target WT(nfcdep,max) is now 14

2017-06-23 00:19:59 +02:00

digital_technology.c

NFC: digital: NFC-A SEL_RES must be one byte

2017-06-23 00:19:59 +02:00

digital.h

NFC: digital: Add 'tg_listen_md' and 'tg_get_rf_tech' driver hooks

2014-07-23 01:17:31 +02:00

Kconfig

NFC Digital: Add NFC-F technology support

2013-09-25 02:02:25 +02:00

llcp_commands.c

NFC: llcp: Limit size of SDP URI

2018-02-16 15:16:05 -05:00

llcp_core.c

NFC: Convert timers to use timer_setup()

2017-11-06 01:12:10 +01:00

llcp_sock.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

llcp.h

net: Pass kern from net_proto_family.create to sk_alloc

2015-05-11 10:50:17 -04:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

netlink.c

NFC: llcp: Limit size of SDP URI

2018-02-16 15:16:05 -05:00

nfc.h

nfc: netlink: HCI event connectivity implementation

2015-12-29 19:06:20 +01:00

rawsock.c

networking: make skb_push & __skb_push return void pointers

2017-06-16 11:48:40 -04:00