OSDN Git Service

ANDROID: NFC: st21nfca: Fix memory OOB and leak issues in connectivity events handler
authorSuren Baghdasaryan <surenb@google.com>
Thu, 17 Aug 2017 20:58:40 +0000 (13:58 -0700)
committerAmit Pundir <amit.pundir@linaro.org>
Tue, 14 Aug 2018 12:17:11 +0000 (17:47 +0530)
commit3f186266c89597e6741356fb76c86c5bf5200ddf
tree88e08da550cc29c5e2f18a1e43226fc190931a38
parent3f94853c0be7432c674ddb824b698d5d796c7204
ANDROID: NFC: st21nfca: Fix memory OOB and leak issues in connectivity events handler

Overflow on memcpy is possible in kernel driver for st21nfca's
NFC HCI layer when handling connectivity events if aid_len or
params_len are bigger than the buffer size.
Memory leak is possible when parameter tag is invalid.

Bug: 62679581

Signed-off-by: Suren Baghdasaryan <surenb@google.com>
drivers/nfc/st21nfca/se.c