tree bf54e858aaf3c0d045fb0a4ed25a649dc070cb99
parent 6dda7ac61943e6fe343ee9c11f81958c835cb074
author Suren Baghdasaryan <surenb@google.com> 1503010254 -0700
committer Suren Baghdasaryan <surenb@google.com> 1503330608 -0700

ANDROID: NFC: Fix possible memory corruption when handling SHDLC I-Frame commands

When handling SHDLC I-Frame commands "pipe" field used for indexing
into an array should be checked before usage. If left unchecked it
might access memory outside of the array of size NFC_HCI_MAX_PIPES(127).

Bug: 62679701

Signed-off-by: Suren Baghdasaryan <surenb@google.com>