commit | 3f4427d43b3b684ec867be2ca2ae3287ba6dde46 | [log] [tgz] |
---|---|---|
author | Suren Baghdasaryan <surenb@google.com> | Thu Aug 17 15:50:54 2017 -0700 |
committer | Suren Baghdasaryan <surenb@google.com> | Mon Aug 21 08:45:10 2017 -0700 |
tree | e89daa438490b39e34f2932b719af27a7decb0fe | |
parent | 723c3e0fec28b9bdd15bbc968a14cb584fdd014b [diff] |
ANDROID: NFC: Fix possible memory corruption when handling SHDLC I-Frame commands When handling SHDLC I-Frame commands "pipe" field used for indexing into an array should be checked before usage. If left unchecked it might access memory outside of the array of size NFC_HCI_MAX_PIPES(127). Bug: 62679701 Signed-off-by: Suren Baghdasaryan <surenb@google.com>