ANDROID: NFC: st21nfca: Fix memory OOB and leak issues in connectivity events handler
authorSuren Baghdasaryan <surenb@google.com>
Thu, 17 Aug 2017 20:58:40 +0000 (13:58 -0700)
committerSuren Baghdasaryan <surenb@google.com>
Fri, 25 Aug 2017 15:54:14 +0000 (15:54 +0000)
commitbf7ef8f2d57cd1f5f1846dd58ff9309efad58252
tree46e9fe5d0599b264dd482633216512da32ed44f0
parent34803e7c1c92f53603f6aa11235915afc2589290
ANDROID: NFC: st21nfca: Fix memory OOB and leak issues in connectivity events handler

Overflow on memcpy is possible in kernel driver for st21nfca's
NFC HCI layer when handling connectivity events if aid_len or
params_len are bigger than the buffer size.
Memory leak is possible when parameter tag is invalid.

Bug: 62679581

Signed-off-by: Suren Baghdasaryan <surenb@google.com>
drivers/nfc/st21nfca/se.c