| commit | c2e26216b788c939e995b08f82d24de6212f99fd | [log] [tgz] |
|---|---|---|
| author | Suren Baghdasaryan <surenb@google.com> | Thu Aug 17 15:50:54 2017 -0700 |
| committer | Suren Baghdasaryan <surenb@google.com> | Mon Aug 21 08:50:08 2017 -0700 |
| tree | bf54e858aaf3c0d045fb0a4ed25a649dc070cb99 | |
| parent | 6dda7ac61943e6fe343ee9c11f81958c835cb074 [diff] |
ANDROID: NFC: Fix possible memory corruption when handling SHDLC I-Frame commands When handling SHDLC I-Frame commands "pipe" field used for indexing into an array should be checked before usage. If left unchecked it might access memory outside of the array of size NFC_HCI_MAX_PIPES(127). Bug: 62679701 Signed-off-by: Suren Baghdasaryan <surenb@google.com>