aboutsummaryrefslogtreecommitdiff
path: root/include/linux/ucs2_string.h
diff options
context:
space:
mode:
authorLinus Torvalds <torvalds@linux-foundation.org>2020-02-09 16:08:48 -0800
committerLinus Torvalds <torvalds@linux-foundation.org>2020-02-09 16:08:48 -0800
commitbb6d3fb354c5ee8d6bde2d576eb7220ea09862b9 (patch)
tree7062bb751c04f07d83da42df7c461c4b74f9e37e /include/linux/ucs2_string.h
parent89a47dd1af8fdda667938ec190d9595d55d7ec6f (diff)
Linux 5.6-rc1v5.6-rc1
Diffstat (limited to 'include/linux/ucs2_string.h')
0 files changed, 0 insertions, 0 deletions
generated by cgit
> parente9022b31db80019025967b03df1d059433e9f26d (diff)
nfc/nci: Add the inconsistency check between the input data length and count
write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="610501"], 0xf) Syzbot constructed a write() call with a data length of 3 bytes but a count value of 15, which passed too little data to meet the basic requirements of the function nci_rf_intf_activated_ntf_packet(). Therefore, increasing the comparison between data length and count value to avoid problems caused by inconsistent data length and count. Reported-and-tested-by: