Files
linux/drivers
Suren Baghdasaryan 85e5fc78cf ANDROID: NFC: st21nfca: Fix out of bounds kernel access when handling ATR_REQ
Out of bounds kernel accesses in st21nfca's NFC HCI layer
might happen when handling ATR_REQ events if user-specified
atr_req->length is bigger than the buffer size. In
that case memcpy() inside st21nfca_tm_send_atr_res() will
read extra bytes resulting in OOB read from the kernel heap.

Bug: 62679012

Signed-off-by: Suren Baghdasaryan <surenb@google.com>
2017-08-18 22:01:25 +00:00
..
2016-12-05 14:53:46 -05:00
2017-08-11 13:55:02 -07:00
2017-08-16 14:08:12 -07:00
2017-08-07 14:21:32 -07:00
2017-08-06 18:59:42 -07:00
2017-08-07 14:21:32 -07:00
2017-08-16 14:08:12 -07:00
2017-08-16 14:08:12 -07:00
2017-08-14 10:18:29 -07:00
2017-02-23 17:44:36 +01:00
2017-07-27 15:24:43 -07:00
2017-07-05 16:18:14 +02:00
2017-05-15 09:26:49 +02:00
2017-04-21 09:48:33 +02:00
2017-08-11 13:55:02 -07:00
2017-08-16 14:08:12 -07:00
2017-07-21 08:55:50 +02:00
2017-08-07 14:21:32 -07:00