From 984ef64428720cb1d6cfea3d3af58ee75a580288 Mon Sep 17 00:00:00 2001
From: Matteo Golin <matteo.golin@gmail.com>
Date: Sat, 6 Jun 2026 16:54:27 -0400
Subject: [PATCH] drivers/contactless/pn532: Fix potential overflow

Fixes a potential overflow where more than 16 bytes are written to the
cmd_buffer.

Signed-off-by: Matteo Golin <matteo.golin@gmail.com>
---
 drivers/contactless/pn532.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/drivers/contactless/pn532.c b/drivers/contactless/pn532.c
index bd93de40545..722ca843ea1 100644
--- a/drivers/contactless/pn532.c
+++ b/drivers/contactless/pn532.c
@@ -794,6 +794,7 @@ bool pn532_set_rf_config(struct pn532_dev_s * dev,
 
   pn532_frame_init(f, PN532_COMMAND_RFCONFIGURATION);
   f->data[1] = conf->cfg_item;
+  DEBUGASSERT(conf->data_size <= 16);
   memcpy(&f->data[2], conf->config, conf->data_size);
   f->len += conf->data_size + 1;
   pn532_frame_finish(f);