mirror of
https://github.com/apache/nuttx.git
synced 2026-08-27 04:10:40 +00:00
a3029acf95
An attacker can specify an arbitrary page address when reading MIFARE tags. Without validation, this could read beyond intended memory regions on the tag, potentially causing a crash. The mfrc522_mifare_read() command is also not robust and does not check that the page address is valid. From section 7.6.5 of the *MIFARE Ultralight contactless single-ticket IC (https://www.nxp.com/docs/en/data-sheet/MF0ICU1.pdf) document: >> The READ command needs the page address as a parameter. Only addresses 00h to 0Fh are decoded. Testing: Builds fine. Signed-off-by: Catalin Visinescu <catalin_visinescu@yahoo.com> |
||
|---|---|---|
| .. | ||
| CMakeLists.txt | ||
| Kconfig | ||
| Make.defs | ||
| mfrc522.c | ||
| mfrc522.h | ||
| pn532.c | ||
| pn532.h | ||