tree e89daa438490b39e34f2932b719af27a7decb0fe
parent 723c3e0fec28b9bdd15bbc968a14cb584fdd014b
author Suren Baghdasaryan <surenb@google.com> 1503010254 -0700
committer Suren Baghdasaryan <surenb@google.com> 1503330310 -0700

ANDROID: NFC: Fix possible memory corruption when handling SHDLC I-Frame commands

When handling SHDLC I-Frame commands "pipe" field used for indexing
into an array should be checked before usage. If left unchecked it
might access memory outside of the array of size NFC_HCI_MAX_PIPES(127).

Bug: 62679701

Signed-off-by: Suren Baghdasaryan <surenb@google.com>