cab33b3b6d
[ Upstream commit ca4d4c34ae9aa5c3c0da76662c5e549d2fc0cc86 ]
If the "type_a->nfcid_len" is too large then it would lead to memory
corruption in pn533_target_found_type_a() when we do:
memcpy(nfc_tgt->nfcid1, tgt_type_a->nfcid_data, nfc_tgt->nfcid1_len);
Fixes:
|
||
---|---|---|
.. | ||
Kconfig | ||
Makefile | ||
i2c.c | ||
pn533.c | ||
pn533.h | ||
usb.c |