Kees Cook 6a9c191da4 NFC: llcp: Limit size of SDP URI ... commit fe9c842695e26d8116b61b80bfb905356f07834b upstream. The tlv_len is u8, so we need to limit the size of the SDP URI. Enforce this both in the NLA policy and in the code that performs the allocation and copy, to avoid writing past the end of the allocated buffer. Fixes: d9b8d8e19b ("NFC: llcp: Service Name Lookup netlink interface") Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Ben Hutchings <ben@decadent.org.uk>		2019-07-27 21:51:24 +02:00
..
hci
nci
af_nfc.c
core.c
Kconfig
llcp.h
llcp_commands.c
llcp_core.c
llcp_sock.c
Makefile
netlink.c
nfc.h
rawsock.c