Fix Heap OOBW in nfa_t4tnfcee_store_rx_buf()

Implement bounds check in nfa_t4tnfcee_store_rx_buf to prevent heap
out-of-bounds write when reading data from T4T NFCEE.

Also fix adjacent vulnerabilities in nfa_nfcee_act.cc:
- Fix uint16 underflow in nfa_t4tnfcee_store_cc_info.
- Fix pointer underflow in nfa_t4tnfcee_check_sw.
- Add NULL check for p_dataBuf allocation.

Bug: 508390497
Test: R/W T4T tags
Flag: EXEMPT CVE_FIX
(cherry picked from commit dcbd63d5d860243c331b8308f2192bdaefddb65f)
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:760cb019461de52a31da9d038735abdd18b1e64e
Merged-In: I6c39b1f2dbf8ab6aa3d2d8ddc73abecc4a72598a
Change-Id: I6c39b1f2dbf8ab6aa3d2d8ddc73abecc4a72598a
2 files changed