nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
authorJordy Zomer <jordy@pwning.systems>
Tue, 11 Jan 2022 16:44:51 +0000 (17:44 +0100)
committerDavid S. Miller <davem@davemloft.net>
Wed, 12 Jan 2022 14:17:45 +0000 (14:17 +0000)
commit4fbcc1a4cb20fe26ad0225679c536c80f1648221
tree229ddb89541415682459fce4f0934257016984d2
parent2a4d75bfe41232608f5596a6d1369f92ccb20817
nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION

It appears that there are some buffer overflows in EVT_TRANSACTION.
This happens because the length parameters that are passed to memcpy
come directly from skb->data and are not guarded in any way.

Signed-off-by: Jordy Zomer <jordy@pwning.systems>
Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/nfc/st21nfca/se.c