| commit | eff155b639b70d1c25b7a720e6936441fa68a25e | [log] [tgz] |
|---|---|---|
| author | Alisher Alikhodjaev <alisher@google.com> | Wed Mar 01 12:50:11 2023 -0800 |
| committer | android-t1 <android-t1@t2mobile.com> | Tue May 09 10:03:01 2023 +0800 |
| tree | b7aba4901e90115fde689f79862ce2c10ef20c5d | |
| parent | a6775ac3d661ef92e205c1dec6b9292d671947d4 [diff] |
OOBR in AnalyzeMfcResp in NxpMfcReader.cc Bug: 252763983 Test: build ok Merged-In: I91fa035ca6245e6039eeedb447d7e3306b7aebc5 Change-Id: I20b718a74afd2f4de23ee59716601f82190ea3f0 (cherry picked from commit on googleplex-android-review.googlesource.com host: 67e1db04f568cf50c90758272ceca93426aba932) Merged-In: I20b718a74afd2f4de23ee59716601f82190ea3f0
diff --git a/halimpl/mifare/NxpMfcReader.cc b/halimpl/mifare/NxpMfcReader.cc index d5e2f74..de3b966 100644 --- a/halimpl/mifare/NxpMfcReader.cc +++ b/halimpl/mifare/NxpMfcReader.cc
@@ -350,6 +350,10 @@ } break; case eMfcAuthRsp: { + if (*pBufflen < 2) { + status = NFCSTATUS_FAILED; + break; + } /* check the status byte */ if (NFCSTATUS_SUCCESS == pBuff[1]) { status = NFCSTATUS_SUCCESS;