tree 3e790778427fea6dbd415f3b2ce6afe92594d1eb
parent 58656e5e3b54f9722fbf63509c3ebc30e463eef0
author fang.x.chen <fang.x.chen@sonymobile.com> 1478489470 +0900
committer Jeron Susan <jeron.susan@hi-p.com> 1487303161 +0800

FPII-2803 :Elevation of privilege vulnerability in NFC CVE-2017-0481 A-33434992

Fix native crash in nfc_ncif_proc_activate

The destination of memcpy is allocated with a predetermined maximum
length, but in some cases the length of information being copied is
greater than the maximum length of the destination.
This is the root cause of crash.

Add length check before memcpy to avoid memory overflow

Test: Repeat reading and writing tag
Bug: 33434992
Bug: 32688507
Change-Id: I09ee3c734e9be38a35b1d48679d74e42e0432d78
(cherry picked from commit 09cb3b3dc46c8bab51346a4163b130857d806418)