linux

mirror of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-04-18 20:29:04 +08:00

Files

Lin Ma 0ad6bded17 nfc/nci: fix race with opening and closing

Previously we leverage NCI_UNREG and the lock inside nci_close_device to
prevent the race condition between opening a device and closing a
device. However, it still has problem because a failed opening command
will erase the NCI_UNREG flag and allow another opening command to
bypass the status checking.

This fix corrects that by making sure the NCI_UNREG is held.

Reported-by: syzbot+43475bf3cfbd6e41f5b7@syzkaller.appspotmail.com
Fixes: 48b71a9e66 ("NFC: add NCI_UNREG flag to eliminate the race")
Signed-off-by: Lin Ma <linma@zju.edu.cn>
Signed-off-by: David S. Miller <davem@davemloft.net>

2022-11-18 12:37:11 +00:00

hci

NFC: hci: Split memcpy() of struct hcp_message flexible array

2022-09-27 07:45:18 -07:00

nci

nfc/nci: fix race with opening and closing

2022-11-18 12:37:11 +00:00

af_nfc.c

nfc: fix error handling of nfc_proto_register()

2021-10-13 17:32:38 -07:00

core.c

net: nfc: Directly use ida_alloc()/free()