forked from luck/tmp_suning_uos_patched
db574a60c4
[ Upstream commit ca4d4c34ae9aa5c3c0da76662c5e549d2fc0cc86 ]
If the "type_a->nfcid_len" is too large then it would lead to memory
corruption in pn533_target_found_type_a() when we do:
memcpy(nfc_tgt->nfcid1, tgt_type_a->nfcid_data, nfc_tgt->nfcid1_len);
Fixes:
|
||
---|---|---|
.. | ||
fdp | ||
microread | ||
nfcmrvl | ||
nxp-nci | ||
pn533 | ||
pn544 | ||
s3fwrn5 | ||
st-nci | ||
st21nfca | ||
st95hf | ||
Kconfig | ||
Makefile | ||
mei_phy.c | ||
mei_phy.h | ||
nfcsim.c | ||
port100.c | ||
trf7970a.c |