Dan Carpenter 6491d69839 nfc: nci: Potential off by one in ->pipes[] array ... This is similar to commit e285d5bfb7 ("NFC: Fix the number of pipes") where we changed NFC_HCI_MAX_PIPES from 127 to 128. As the comment next to the define explains, the pipe identifier is 7 bits long. The highest possible pipe is 127, but the number of possible pipes is 128. As the code is now, then there is potential for an out of bounds array access: net/nfc/nci/hci.c:297 nci_hci_cmd_received() warn: array off by one? 'ndev->hci_dev->pipes[pipe]' '0-127 == 127' Fixes: 11f54f2286 ("NFC: nci: Add HCI over NCI protocol support") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2019-04-06 15:05:07 -07:00
..
9p
bluetooth	Bluetooth: Add quirk for reading BD_ADDR from fwnode property	2019-02-26 10:08:26 +01:00
caif
iucv
netfilter	netfilter: nf_tables: bogus EBUSY when deleting set after flush	2019-03-11 13:19:24 +01:00
netns	netns: provide pure entropy for net_hash_mix()	2019-03-28 17:00:45 -07:00
nfc	nfc: nci: Potential off by one in ->pipes[] array	2019-04-06 15:05:07 -07:00
phonet
sctp	sctp: get sctphdr by offset in sctp_compute_cksum	2019-03-18 18:16:12 -07:00
tc_act	net/sched: don't dereference a->goto_chain to read the chain index	2019-03-21 13:26:42 -07:00
6lowpan.h
act_api.h	net/sched: let actions use RCU to access 'goto_chain'	2019-03-21 13:26:42 -07:00
addrconf.h
af_ieee802154.h
af_rxrpc.h
af_unix.h	net: split out functions related to registering inflight socket files	2019-02-28 08:24:23 -07:00
af_vsock.h
ah.h
arp.h
atmclip.h
ax25.h
ax88796.h
bond_3ad.h
bond_alb.h
bond_options.h
bonding.h
busy_poll.h
calipso.h
cfg80211-wext.h
cfg80211.h
cfg802154.h
checksum.h
cipso_ipv4.h
cls_cgroup.h
codel.h
codel_impl.h
codel_qdisc.h
compat.h
datalink.h
dcbevent.h
dcbnl.h
devlink.h	devlink: Add support for direct reporter health state update	2019-03-04 11:00:43 -08:00
dn.h
dn_dev.h
dn_fib.h
dn_neigh.h
dn_nsp.h
dn_route.h
dsa.h	net: dsa: add KSZ9893 switch tagging support	2019-03-03 13:48:49 -08:00
dsfield.h
dst.h
dst_cache.h
dst_metadata.h
dst_ops.h
erspan.h
esp.h
ethoc.h
failover.h
fib_notifier.h
fib_rules.h
firewire.h
flow.h	route: Add multipath_hash in flowi_common to make user-define hash	2019-02-27 12:50:17 -08:00
flow_dissector.h
flow_offload.h
fou.h
fq.h
fq_impl.h
garp.h
gen_stats.h
genetlink.h
geneve.h
gre.h
gro_cells.h
gtp.h
gue.h
hwbm.h
icmp.h	net: Add __icmp_send helper.	2019-02-25 14:32:35 -08:00
ieee80211_radiotap.h
ieee802154_netdev.h
if_inet6.h
ife.h
ila.h
inet6_connection_sock.h
inet6_hashtables.h
inet_common.h
inet_connection_sock.h
inet_ecn.h
inet_frag.h	net: remove unused struct inet_frag_queue.fragments field	2019-02-26 08:27:05 -08:00
inet_hashtables.h
inet_sock.h
inet_timewait_sock.h
inetpeer.h
ip.h	vrf: check accept_source_route on the original netdevice	2019-04-01 10:44:58 -07:00
ip6_checksum.h
ip6_fib.h
ip6_route.h
ip6_tunnel.h
ip_fib.h
ip_tunnels.h	route: Add multipath_hash in flowi_common to make user-define hash	2019-02-27 12:50:17 -08:00
ip_vs.h
ipcomp.h
ipconfig.h
ipv6.h
ipv6_frag.h
ipx.h
iw_handler.h
kcm.h
l3mdev.h
lag.h
lapb.h
lib80211.h
llc.h
llc_c_ac.h
llc_c_ev.h
llc_c_st.h
llc_conn.h
llc_if.h
llc_pdu.h
llc_s_ac.h
llc_s_ev.h
llc_s_st.h
llc_sap.h
lwtunnel.h
mac80211.h
mac802154.h
mip6.h
mld.h
mpls.h
mpls_iptunnel.h
mrp.h
ncsi.h
ndisc.h
neighbour.h
net_failover.h
net_namespace.h	netns: provide pure entropy for net_hash_mix()	2019-03-28 17:00:45 -07:00
net_ratelimit.h
netevent.h
netlabel.h
netlink.h
netprio_cgroup.h
netrom.h
nexthop.h
nl802154.h
nsh.h
p8022.h
page_pool.h
ping.h
pkt_cls.h	net: sched: set dedicated tcf_walker flag when tp is empty	2019-02-25 10:18:17 -08:00
pkt_sched.h
pptp.h
protocol.h
psample.h
psnap.h
raw.h
rawv6.h
red.h
regulatory.h
request_sock.h	net: keep refcount warning in reqsk_free()	2019-03-09 19:51:44 -08:00
rose.h
route.h
rsi_91x.h
rtnetlink.h
sch_generic.h	net: sched: introduce and use qdisc tree flush/purge helpers	2019-04-01 14:50:13 -07:00
scm.h
secure_seq.h
seg6.h
seg6_hmac.h
seg6_local.h
slhc_vj.h
smc.h
snmp.h
sock.h	packets: Always register packet sk in the same order	2019-03-18 17:58:39 -07:00
sock_reuseport.h
Space.h
stp.h
strparser.h
switchdev.h	switchdev: Remove unused transaction item queue	2019-03-01 21:35:19 -08:00
tcp.h	tcp: convert tcp_md5_needed to static_branch API	2019-02-26 13:16:03 -08:00
tcp_states.h
timewait_sock.h
tipc.h
tls.h	tls: Fix write space handling	2019-03-03 22:10:16 -08:00
transp_v6.h
tso.h
tun_proto.h
udp.h
udp_tunnel.h
udplite.h
vsock_addr.h
vxlan.h	vxlan: add extack support for create and changelink	2019-02-26 08:54:37 -08:00
wext.h
wimax.h
x25.h
x25device.h
xdp.h
xdp_sock.h	xsk: fix umem memory leak on cleanup	2019-03-16 01:27:51 +01:00
xfrm.h