Commit 460d8f97 authored Oct 04, 2012 by Szymon Janc Committed by Samuel Ortiz Oct 26, 2012

NFC: Use NFC_MAX_GT_LEN to check len in nci_set_local_general_bytes



local_gb is of size NFC_MAX_GT_LEN and len is used as index for it.
Check len against this instead of NCI_MAX_PARAM_LEN before accessing
local_gb.

Signed-off-by: Szymon Janc <szymon.janc@tieto.com>
Signed-off-by: Samuel Ortiz <sameo@linux.intel.com>

parent 7ad39395

net/nfc/nci/core.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -420,7 +420,7 @@ static int nci_set_local_general_bytes(struct nfc_dev *nfc_dev)
		if ((param.val == NULL) \|\| (param.len == 0))
		return rc;

		if (param.len > NCI_MAX_PARAM_LEN)
		if (param.len > NFC_MAX_GT_LEN)
		return -EINVAL;

		for (i = 0; i < param.len; i++)