Merge "Prevent OOB error in rw_i93_sm_read_ndef()" into oc-dev
diff --git a/src/nfc/tags/rw_i93.c b/src/nfc/tags/rw_i93.c
index ff3e61d..a62aacd 100644
--- a/src/nfc/tags/rw_i93.c
+++ b/src/nfc/tags/rw_i93.c
@@ -1776,6 +1776,12 @@
 
   RW_TRACE_DEBUG0("rw_i93_sm_read_ndef ()");
 
+  if (length == 0) {
+    android_errorWriteLog(0x534e4554, "122035770");
+    rw_i93_handle_error(NFC_STATUS_FAILED);
+    return;
+  }
+
   STREAM_TO_UINT8(flags, p);
   length--;