Dan Carpenter 6491d69839 nfc: nci: Potential off by one in ->pipes[] array ... This is similar to commit e285d5bfb7 ("NFC: Fix the number of pipes") where we changed NFC_HCI_MAX_PIPES from 127 to 128. As the comment next to the define explains, the pipe identifier is 7 bits long. The highest possible pipe is 127, but the number of possible pipes is 128. As the code is now, then there is potential for an out of bounds array access: net/nfc/nci/hci.c:297 nci_hci_cmd_received() warn: array off by one? 'ndev->hci_dev->pipes[pipe]' '0-127 == 127' Fixes: 11f54f2286 ("NFC: nci: Add HCI over NCI protocol support") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2019-04-06 15:05:07 -07:00
..
9p
bluetooth	Bluetooth: Add quirk for reading BD_ADDR from fwnode property	2019-02-26 10:08:26 +01:00
caif
iucv
netfilter	netfilter: nf_tables: bogus EBUSY when deleting set after flush	2019-03-11 13:19:24 +01:00
netns	netns: provide pure entropy for net_hash_mix()	2019-03-28 17:00:45 -07:00
nfc	nfc: nci: Potential off by one in ->pipes[] array	2019-04-06 15:05:07 -07:00
phonet	phonet: fix building with clang	2019-02-21 16:23:56 -08:00
sctp	sctp: get sctphdr by offset in sctp_compute_cksum	2019-03-18 18:16:12 -07:00
tc_act	net/sched: don't dereference a->goto_chain to read the chain index	2019-03-21 13:26:42 -07:00
6lowpan.h
act_api.h	net/sched: let actions use RCU to access 'goto_chain'	2019-03-21 13:26:42 -07:00
addrconf.h	ipv6_stub: add ipv6_route_input stub/proxy.	2019-02-13 18:27:55 -08:00
af_ieee802154.h
af_rxrpc.h
af_unix.h	net: split out functions related to registering inflight socket files	2019-02-28 08:24:23 -07:00
af_vsock.h
ah.h
arp.h
atmclip.h
ax25.h
ax88796.h
bond_3ad.h	bonding: count master 3ad stats separately	2019-01-24 22:18:48 -08:00
bond_alb.h
bond_options.h
bonding.h
busy_poll.h
calipso.h
cfg80211-wext.h
cfg80211.h	cfg80211: allow sending vendor events unicast	2019-02-22 13:46:43 +01:00
cfg802154.h
checksum.h
cipso_ipv4.h
cls_cgroup.h
codel_impl.h
codel_qdisc.h
codel.h
compat.h
datalink.h
dcbevent.h
dcbnl.h
devlink.h	devlink: Add support for direct reporter health state update	2019-03-04 11:00:43 -08:00
dn_dev.h
dn_fib.h
dn_neigh.h
dn_nsp.h
dn_route.h
dn.h
dsa.h	net: dsa: add KSZ9893 switch tagging support	2019-03-03 13:48:49 -08:00
dsfield.h
dst_cache.h
dst_metadata.h
dst_ops.h
dst.h
erspan.h
esp.h
ethoc.h
failover.h
fib_notifier.h
fib_rules.h
firewire.h
flow_dissector.h
flow_offload.h	flow_offload: fix block stats	2019-02-13 21:07:47 -08:00
flow.h	route: Add multipath_hash in flowi_common to make user-define hash	2019-02-27 12:50:17 -08:00
fou.h
fq_impl.h
fq.h
garp.h
gen_stats.h
genetlink.h
geneve.h
gre.h
gro_cells.h
gtp.h
gue.h
hwbm.h
icmp.h	net: Add __icmp_send helper.	2019-02-25 14:32:35 -08:00
ieee80211_radiotap.h	wireless-drivers-next patches for 5.1	2019-02-22 12:56:24 -08:00
ieee802154_netdev.h
if_inet6.h
ife.h
ila.h
inet6_connection_sock.h
inet6_hashtables.h
inet_common.h
inet_connection_sock.h	tcp: change pingpong threshold to 3	2019-01-27 13:29:43 -08:00
inet_ecn.h
inet_frag.h	net: remove unused struct inet_frag_queue.fragments field	2019-02-26 08:27:05 -08:00
inet_hashtables.h
inet_sock.h
inet_timewait_sock.h
inetpeer.h	net: ipv4: use a dedicated counter for icmp_v4 redirect packets	2019-02-08 21:50:15 -08:00
ip6_checksum.h
ip6_fib.h
ip6_route.h
ip6_tunnel.h
ip_fib.h
ip_tunnels.h	route: Add multipath_hash in flowi_common to make user-define hash	2019-02-27 12:50:17 -08:00
ip_vs.h	ipvs: avoid indirect calls when calculating checksums	2019-01-28 11:15:58 +01:00
ip.h	vrf: check accept_source_route on the original netdevice	2019-04-01 10:44:58 -07:00
ipcomp.h
ipconfig.h
ipv6_frag.h	net: IP6 defrag: use rbtrees for IPv6 defrag	2019-01-25 21:37:11 -08:00
ipv6.h
ipx.h
iw_handler.h
kcm.h
l3mdev.h	ipvlan, l3mdev: fix broken l3s mode wrt local routes	2019-01-30 22:13:34 -08:00
lag.h
lapb.h
lib80211.h
llc_c_ac.h
llc_c_ev.h
llc_c_st.h
llc_conn.h
llc_if.h
llc_pdu.h
llc_s_ac.h
llc_s_ev.h
llc_s_st.h
llc_sap.h
llc.h
lwtunnel.h	bpf: implement BPF_LWT_ENCAP_IP mode in bpf_lwt_push_encap	2019-02-13 18:27:55 -08:00
mac80211.h	mac80211: notify driver on subsequent CSA beacons	2019-02-22 13:45:51 +01:00
mac802154.h
mip6.h
mld.h
mpls_iptunnel.h
mpls.h
mrp.h
ncsi.h
ndisc.h
neighbour.h
net_failover.h
net_namespace.h	netns: provide pure entropy for net_hash_mix()	2019-03-28 17:00:45 -07:00
net_ratelimit.h
netevent.h
netlabel.h
netlink.h	netlink: reduce NLA_POLICY_NESTED{,_ARRAY} arguments	2019-02-01 11:06:55 +01:00
netprio_cgroup.h
netrom.h
nexthop.h
nl802154.h
nsh.h
p8022.h
page_pool.h
ping.h
pkt_cls.h	net: sched: set dedicated tcf_walker flag when tp is empty	2019-02-25 10:18:17 -08:00
pkt_sched.h
pptp.h
protocol.h
psample.h
psnap.h
raw.h
rawv6.h
red.h
regulatory.h
request_sock.h	net: keep refcount warning in reqsk_free()	2019-03-09 19:51:44 -08:00
rose.h
route.h
rsi_91x.h
rtnetlink.h
sch_generic.h	net: sched: introduce and use qdisc tree flush/purge helpers	2019-04-01 14:50:13 -07:00
scm.h
secure_seq.h
seg6_hmac.h
seg6_local.h
seg6.h
slhc_vj.h
smc.h	net/smc: add smcd support to the pnet table	2019-02-21 10:34:37 -08:00
snmp.h
sock_reuseport.h
sock.h	packets: Always register packet sk in the same order	2019-03-18 17:58:39 -07:00
Space.h
stp.h
strparser.h
switchdev.h	switchdev: Remove unused transaction item queue	2019-03-01 21:35:19 -08:00
tcp_states.h
tcp.h	tcp: convert tcp_md5_needed to static_branch API	2019-02-26 13:16:03 -08:00
timewait_sock.h
tipc.h
tls.h	tls: Fix write space handling	2019-03-03 22:10:16 -08:00
transp_v6.h
tso.h
tun_proto.h
udp_tunnel.h
udp.h
udplite.h
vsock_addr.h
vxlan.h	vxlan: add extack support for create and changelink	2019-02-26 08:54:37 -08:00
wext.h
wimax.h
x25.h
x25device.h
xdp_sock.h	xsk: fix umem memory leak on cleanup	2019-03-16 01:27:51 +01:00
xdp.h
xfrm.h	xfrm: destroy xfrm_state synchronously on net exit path	2019-02-05 06:29:20 +01:00