nfc: st21nfca: validate ISO15693 inventory length

Browse source

The ISO15693 inventory helper removes a two-byte prefix without checking
that it exists, then accepts a one-byte remainder before reading data[1] as
the DSFID.

Require the prefix and at least two remaining bytes before copying the UID
data and reading the DSFID.

Fixes: 7974728094 ("NFC: st21nfca: Add ISO15693 Reader/Writer support")
Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Link: https://patch.msgid.link/20260830132958.6397-1-pengpeng@iscas.ac.cn
Signed-off-by: David Heidelberg <david@ixit.cz>

...

This commit is contained in:

Pengpeng Hou 2026-08-30 21:29:58 +08:00 • committed by David Heidelberg

parent dcab71a701

commit 7f2ea5ed58

No known key found for this signature in database

GPG key ID: 60023FC4D3492072

1 changed files with 1 additions and 3 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

drivers/nfc/st21nfca/core.c

View file