| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <d92d036b-fc99-4ce0-8377-4079a3d00fb9@hale.at>
Date: Wed, 10 Dec 2025 09:01:42 +0100
From: Michael Thalmeier <michael.thalmeier@...e.at>
To: Simon Horman <horms@...nel.org>
Cc: Deepak Sharma <deepak.sharma.472935@...il.com>,
Krzysztof Kozlowski <krzk@...nel.org>,
Vadim Fedorenko <vadim.fedorenko@...ux.dev>, linux-kernel@...r.kernel.org,
netdev@...r.kernel.org, stable@...r.kernel.org
Subject: Re: [PATCH] net: nfc: nci: Fix parameter validation for packet data
On 12/9/25 17:31, Simon Horman wrote:
> On Tue, Dec 09, 2025 at 02:21:03PM +0100, Michael Thalmeier wrote:
>> Since commit 8fcc7315a10a ("net: nfc: nci: Add parameter validation for
>> packet data") communication with nci nfc chips is not working any more.
>>
>> The mentioned commit tries to fix access of uninitialized data, but
>> failed to understand that in some cases the data packet is of variable
>> length and can therefore not be compared to the maximum packet length
>> given by the sizeof(struct).
>>
>> For these cases it is only possible to check for minimum packet length.
>>
>> Fixes: 8fcc7315a10a ("net: nfc: nci: Add parameter validation for packet data")
>
> Hi Michael,
>
> I don't see that hash in net. Perhaps it should be:
>
> Fixes: 9c328f54741b ("net: nfc: nci: Add parameter validation for packet data")
Hi Simon,
You are right. This was a hash from a stable branch.
I will send a v2.
>
>> Cc: stable@...r.kernel.org
>> Signed-off-by: Michael Thalmeier <michael.thalmeier@...e.at>
>
> ...
Powered by blists - more mailing lists