Suren Baghdasaryan 8eddd2bacf ANDROID: NFC: Fix possible memory corruption when handling SHDLC I-Frame commands ...

When handling SHDLC I-Frame commands "pipe" field used for indexing
into an array should be checked before usage. If left unchecked it
might access memory outside of the array of size NFC_HCI_MAX_PIPES(127).

Bug: 62679701

Signed-off-by: Suren Baghdasaryan <surenb@google.com>

2017-09-18 21:14:30 +01:00

..

command.c

NFC: hci: Change nfc_hci_send_response gate parameter to pipe

2015-01-27 23:55:20 +01:00

core.c

ANDROID: NFC: Fix possible memory corruption when handling SHDLC I-Frame commands

2017-09-18 21:14:30 +01:00

hci.h

NFC: hci: Remove nfc_hci_pipe2gate function

2015-01-28 00:03:36 +01:00

hcp.c

NFC: hci: Remove nfc_hci_pipe2gate function

2015-01-28 00:03:36 +01:00

Kconfig

NFC: Select CRC_CCITT for SHDLC link layer of HCI based drivers

2012-05-15 17:27:28 -04:00

llc_nop.c

nfc: Fix FSF address in file headers

2013-12-11 10:56:21 -05:00

llc_shdlc.c

net: Spelling s/transmition/transmission/

2014-01-14 17:11:26 -08:00

llc.c

NFC: st21nfca: Add support for proprietary commands

2015-10-27 04:00:24 +01:00

llc.h

nfc: Fix FSF address in file headers

2013-12-11 10:56:21 -05:00

Makefile

NFC: Changed HCI and PN544 HCI driver to use the new HCI LLC Core

2012-09-25 00:17:26 +02:00