Ryosuke Yasuoka e4a87abf58 nfc: nci: Fix uninit-value in nci_rx_work ... syzbot reported the following uninit-value access issue [1] nci_rx_work() parses received packet from ndev->rx_q. It should be validated header size, payload size and total packet size before processing the packet. If an invalid packet is detected, it should be silently discarded. Fixes: d24b03535e ("nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet") Reported-and-tested-by: syzbot+d7b4dc6cd50410152534@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=d7b4dc6cd50410152534 [1] Signed-off-by: Ryosuke Yasuoka <ryasuoka@redhat.com> Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org> Signed-off-by: David S. Miller <davem@davemloft.net>		2024-05-20 11:41:26 +01:00
..
core.c	nfc: nci: Fix uninit-value in nci_rx_work	2024-05-20 11:41:26 +01:00
data.c	NFC: nci: fix memory leak in nci_rx_data_packet()	2022-11-22 12:42:23 +01:00
hci.c	nfc: Add KCOV annotations	2022-11-02 11:58:13 +00:00
Kconfig	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
lib.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 234	2019-06-19 17:09:07 +02:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
ntf.c	NFC: nci: Bounds check struct nfc_target arrays	2022-12-05 17:46:25 -08:00
rsp.c	nfc: nci: fix the UAF of rf_conn_info object	2021-10-08 17:24:32 +01:00
spi.c	net: fill in MODULE_DESCRIPTION()s for NFC	2024-01-11 16:16:08 -08:00
uart.c	tty: ldops: unify to u8	2023-08-11 21:12:47 +02:00