diff options
| author | Christophe Ricard <christophe.ricard@gmail.com> | 2014-08-10 22:04:56 (GMT) |
|---|---|---|
| committer | Samuel Ortiz <sameo@linux.intel.com> | 2014-09-07 22:07:44 (GMT) |
| commit | 56f1ffcccd784672654918f9214979b4918c2544 (patch) | |
| tree | 9a7015cf87cc64844792febb32d0cd8e75124cb3 /kernel/irq | |
| parent | a51577c9e3c49dbc44c821f9e170b96bbea716e3 (diff) | |
| download | linux-56f1ffcccd784672654918f9214979b4918c2544.tar.xz | |
NFC: st21nfca: Add condition to make sure atr_req->length is valid.
gb_len in st21nfca_tm_send_atr_res can be negative. Not checking for
that could lead to a potential kernel oops.
We now make sure that atr_req->length > sizeof(struct st21nfca_atr_req)
to avoid such situation.
Signed-off-by: Christophe Ricard <christophe-h.ricard@st.com>
Signed-off-by: Samuel Ortiz <sameo@linux.intel.com>
Diffstat (limited to 'kernel/irq')
0 files changed, 0 insertions, 0 deletions