diff options
| author | Pengpeng Hou <pengpeng@iscas.ac.cn> | 2026-07-23 10:37:20 +0800 |
|---|---|---|
| committer | David Heidelberg <david@ixit.cz> | 2026-08-11 18:10:04 +0200 |
| commit | 25519469972ef57c3edb1805dabd6c5612b90211 (patch) | |
| tree | fdb4e150479d773dae5374fb72e9ea515b84c568 /tools/perf/scripts/python/bin/stackcollapse-record | |
| parent | 2e65bafdfd3a8bba972b3d17b6a57816557530fc (diff) | |
nfc: microread: validate target discovery payload lengths
microread_target_discovered() parses target discovery payloads from
skb->data according to the HCI gate. The fixed field offsets and UID
copies were checked only against the destination nfc_target buffers, not
against the actual skb length.
Validate that each gate-specific payload contains the fixed fields and
UID bytes before reading or copying them.
Fixes: cfad1ba87150 ("NFC: Initial support for Inside Secure microread")
Cc: stable@vger.kernel.org
Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Link: https://patch.msgid.link/20260723103508.1-microread-v2-pengpeng@iscas.ac.cn
Signed-off-by: David Heidelberg <david@ixit.cz>
Diffstat (limited to 'tools/perf/scripts/python/bin/stackcollapse-record')
0 files changed, 0 insertions, 0 deletions