tree 646f4df635324023e5e02b50e07a9c5b2b702b68
parent 00e6fd9e588477bb91e79bcc8b9ceddadc4fdd72
author fang.x.chen <fang.x.chen@sonymobile.com> 1478489470 +0900
committer Dirk Vogt <dirk@fairphone.com> 1488906241 +0100

Fix native crash in nfc_ncif_proc_activate

The destination of memcpy is allocated with a predetermined maximum
length, but in some cases the length of information being copied is
greater than the maximum length of the destination.
This is the root cause of crash.

Add length check before memcpy to avoid memory overflow

FPIIM-433

Test: Repeat reading and writing tag
Bug: 33434992
Bug: 32688507
Change-Id: I09ee3c734e9be38a35b1d48679d74e42e0432d78
(cherry picked from commit 09cb3b3dc46c8bab51346a4163b130857d806418)