Re: [PATCH] NFC: nci: Add bounds checking in nci_hci_create_pipe()
From: Krzysztof Kozlowski <krzk@kernel.org>
Date: 2025-01-22 12:33:57
Also in:
kernel-janitors, lkml
On 17/01/2025 10:38, Dan Carpenter wrote:
The "pipe" variable is a u8 which comes from the network. If it's more
than 127, then it results in memory corruption in the caller,
nci_hci_connect_gate().
Cc: stable@vger.kernel.org
Fixes: a1b0b9415817 ("NFC: nci: Create pipe on specific gate in nci_hci_connect_gate")
Signed-off-by: Dan Carpenter <redacted>Reviewed-by: Krzysztof Kozlowski <redacted> Best regards, Krzysztof