On 17/01/2025 10:38, Dan Carpenter wrote:
> The "pipe" variable is a u8 which comes from the network. If it's more
> than 127, then it results in memory corruption in the caller,
> nci_hci_connect_gate().
>
> Cc: stable@xxxxxxxxxxxxxxx
> Fixes: a1b0b9415817 ("NFC: nci: Create pipe on specific gate in nci_hci_connect_gate")
> Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx>
Best regards,
Krzysztof
