Kees Cook fe9c842695 NFC: llcp: Limit size of SDP URI ... The tlv_len is u8, so we need to limit the size of the SDP URI. Enforce this both in the NLA policy and in the code that performs the allocation and copy, to avoid writing past the end of the allocated buffer. Fixes: d9b8d8e19b ("NFC: llcp: Service Name Lookup netlink interface") Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: David S. Miller <davem@davemloft.net>		2018-02-16 15:16:05 -05:00
..
hci	NFC: Convert timers to use timer_setup()	2017-11-06 01:12:10 +01:00
nci	net: annotate ->poll() instances	2017-11-27 16:20:04 -05:00
Kconfig	NFC Digital: Add NFC-F technology support	2013-09-25 02:02:25 +02:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
af_nfc.c	net: socket: mark socket protocol handler structs as const	2017-05-16 11:54:07 -04:00
core.c	NFC: Convert timers to use timer_setup()	2017-11-06 01:12:10 +01:00
digital.h	NFC: digital: Add 'tg_listen_md' and 'tg_get_rf_tech' driver hooks	2014-07-23 01:17:31 +02:00
digital_core.c	NFC: digital: Abort cmd when deactivating target	2017-11-10 00:03:39 +01:00
digital_dep.c	NFC: digital: NFC-DEP Target WT(nfcdep,max) is now 14	2017-06-23 00:19:59 +02:00
digital_technology.c	NFC: digital: NFC-A SEL_RES must be one byte	2017-06-23 00:19:59 +02:00
llcp.h	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
llcp_commands.c	NFC: llcp: Limit size of SDP URI	2018-02-16 15:16:05 -05:00
llcp_core.c	NFC: Convert timers to use timer_setup()	2017-11-06 01:12:10 +01:00
llcp_sock.c	vfs: do bulk POLL* -> EPOLL* replacement	2018-02-11 14:34:03 -08:00
netlink.c	NFC: llcp: Limit size of SDP URI	2018-02-16 15:16:05 -05:00
nfc.h	nfc: netlink: HCI event connectivity implementation	2015-12-29 19:06:20 +01:00
rawsock.c	networking: make skb_push & __skb_push return void pointers	2017-06-16 11:48:40 -04:00