Dan Carpenter 6491d69839 nfc: nci: Potential off by one in ->pipes[] array ... This is similar to commit e285d5bfb7 ("NFC: Fix the number of pipes") where we changed NFC_HCI_MAX_PIPES from 127 to 128. As the comment next to the define explains, the pipe identifier is 7 bits long. The highest possible pipe is 127, but the number of possible pipes is 128. As the code is now, then there is potential for an out of bounds array access: net/nfc/nci/hci.c:297 nci_hci_cmd_received() warn: array off by one? 'ndev->hci_dev->pipes[pipe]' '0-127 == 127' Fixes: 11f54f2286 ("NFC: nci: Add HCI over NCI protocol support") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2019-04-06 15:05:07 -07:00
..
acpi	ACPI: use different default debug value than ACPICA	2019-03-25 10:45:59 +01:00
asm-generic	kbuild: force all architectures except um to include mandatory-y	2019-03-17 12:56:32 +09:00
clocksource
crypto
drm	drm i915, amdgpu, qxl and etnaviv fixes	2019-03-15 13:58:35 -07:00
dt-bindings	We have a fairly balanced mix of clk driver updates and clk framework	2019-03-14 08:46:17 -07:00
keys	Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2019-03-10 17:32:04 -07:00
kvm	ARM: some cleanups, direct physical timer assignment, cache sanitization	2019-03-15 15:00:28 -07:00
linux	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-04-04 18:07:12 -10:00
math-emu
media
memory
misc	auxdisplay: charlcd: Introduce charlcd_free() helper	2019-03-17 08:48:16 +01:00
net	nfc: nci: Potential off by one in ->pipes[] array	2019-04-06 15:05:07 -07:00
pcmcia
ras
rdma
scsi
soc	IOMMU Updates for Linux v5.1	2019-03-10 12:29:52 -07:00
sound	sound fixes for 5.1-rc1	2019-03-15 14:05:00 -07:00
target
trace	NFS client bugfixes for Linux 5.1	2019-03-16 12:28:18 -07:00
uapi	A collection of x86 and ARM bugfixes, and some improvements to documentation.	2019-03-31 08:55:59 -07:00
video	media updates for v5.1-rc1	2019-03-09 14:45:54 -08:00
xen