Messages in this thread | | | Date | Fri, 23 Jun 2017 00:41:11 +0200 | From | Samuel Ortiz <> | Subject | Re: [PATCH] nfc: Add sockaddr length checks before accessing sa_family in bind handlers |
| |
On Tue, Jun 13, 2017 at 06:44:28PM +0200, Mateusz Jurczyk wrote: > Verify that the caller-provided sockaddr structure is large enough to > contain the sa_family field, before accessing it in bind() handlers of the > AF_NFC socket. Since the syscall doesn't enforce a minimum size of the > corresponding memory region, very short sockaddrs (zero or one byte long) > result in operating on uninitialized memory while referencing .sa_family. > > Signed-off-by: Mateusz Jurczyk <mjurczyk@google.com> > --- > net/nfc/llcp_sock.c | 6 ++++-- > 1 file changed, 4 insertions(+), 2 deletions(-) Applied to nfc-next, thanks.
Cheers, Samuel.
| |