Dan Carpenter 885ba1da68 NFC: potential integer overflow problem in check_crc() ...

If "buf[0]" is 255 then "len" gets set to 0.  The call to
"crc_ccitt(0xffff, buf, len - 2);" casts the "len - 2" to a high
positive number which is ugly.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>

2012-05-25 11:16:16 -04:00

..

Kconfig

…

Makefile

…

nfcwilink.c

…

pn533.c

…

pn544_hci.c

NFC: potential integer overflow problem in check_crc()

2012-05-25 11:16:16 -04:00

pn544.c

…