| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2022/ |
| D | poc.cpp | 51 tNFC_CONN *p_data; variable
133 p_data = (tNFC_CONN *) allocate_memory(sizeof(tNFC_CONN)); in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
134 FAIL_CHECK(p_data); in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
136 p_data->data.p_data = (NFC_HDR *) allocate_memory(sizeof(NFC_HDR) * 4); in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
138 if (!(p_data->data.p_data)) { in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
139 free(p_data); in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
140 FAIL_CHECK(p_data->data.p_data); in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
142 vulnPtr = (char *)p_data->data.p_data; in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
143 p_data->status = NFC_STATUS_OK; in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
149 NFC_HDR* p_msg = (p_data->data).p_data; in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2021-0430/ |
| D | poc.cpp | 54 tNFC_CONN* p_data = (tNFC_CONN*) malloc(sizeof(tNFC_CONN)); in main() local
55 if (!p_data) { in main()
59 p_data->data.p_data = (NFC_HDR*) malloc(sizeof(uint8_t) * 16); in main()
60 if (!(p_data->data.p_data)) { in main()
61 free(p_data); in main()
65 p_data->data.status = NFC_STATUS_OK; in main()
68 NFC_HDR* mfc_data = (NFC_HDR*) p_data->data.p_data; in main()
74 free(p_data->data.p_data); in main()
75 free(p_data); in main()
81 p_cb->p_cback(0, event, p_data); in main()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2035/ |
| D | poc.cpp | 49 tNFC_CONN *p_data = (tNFC_CONN *) malloc(sizeof(tNFC_CONN)); in main() local
50 if (!p_data) { in main()
54 p_data->data.p_data = (NFC_HDR *) malloc(sizeof(uint8_t) * 32); in main()
55 if (!(p_data->data.p_data)) { in main()
56 free(p_data); in main()
60 NFC_HDR *p_resp = (NFC_HDR*) p_data->data.p_data; in main()
68 p_data->status = NFC_STATUS_OK; in main()
70 p_cb->p_cback(0, event, p_data); in main()
71 free(p_data->data.p_data); in main()
72 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2038/ |
| D | poc.cpp | 48 tNFC_CONN* p_data = (tNFC_CONN*)malloc(sizeof(tNFC_CONN)); in main() local
49 if (!p_data) { in main()
53 p_data->data.p_data = (NFC_HDR*)malloc(sizeof(NFC_HDR)); in main()
54 if (!(p_data->data.p_data)) { in main()
55 free(p_data); in main()
63 p_data->status = NFC_STATUS_OK; in main()
65 NFC_HDR* p_resp = (NFC_HDR*)p_data->data.p_data; in main()
69 p_cb->p_cback(0, event, p_data); in main()
70 free(p_data->data.p_data); in main()
71 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2099/ |
| D | poc.cpp | 30 bool nfa_rw_activate_ntf(tNFA_RW_MSG *p_data);
81 tNFA_RW_MSG *p_data = (tNFA_RW_MSG *)malloc(sizeof(tNFA_RW_MSG)); in main() local
82 if (!p_data) { in main()
85 p_data->activate_ntf.p_activate_params = in main()
87 if (!(p_data->activate_ntf.p_activate_params)) { in main()
88 return freeResourcesAndReturn(EXIT_FAILURE, p_data); in main()
91 tNFC_ACTIVATE_DEVT *p_activate_params = p_data->activate_ntf.p_activate_params; in main()
94 nfa_rw_activate_ntf(p_data); in main()
99 return freeResourcesAndReturn(EXIT_FAILURE, p_data, p_data->activate_ntf.p_activate_params); in main()
103 p_rw_data->data.p_data = (NFC_HDR *)malloc(sizeof(NFC_HDR)); in main()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2039/ |
| D | poc.cpp | 52 tNFC_CONN* p_data = (tNFC_CONN*)malloc(sizeof(tNFC_CONN)); in main() local
53 if (!p_data) { in main()
57 p_data->data.p_data = (NFC_HDR*)malloc(sizeof(uint8_t) * 16); in main()
58 if (!(p_data->data.p_data)) { in main()
59 free(p_data); in main()
67 p_data->status = NFC_STATUS_OK; in main()
69 NFC_HDR* p_resp = (NFC_HDR*)p_data->data.p_data; in main()
73 p_cb->p_cback(0, event, p_data); in main()
74 free(p_data->data.p_data); in main()
75 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2018-9594/ |
| D | poc.cpp | 32 tNFC_CONN *p_data = (tNFC_CONN *)malloc(sizeof(tNFC_CONN)); in main() local
33 if (!p_data) { in main()
36 p_data->data.p_data = (NFC_HDR *)malloc(16400 * sizeof(uint8_t)); in main()
37 if (!(p_data->data.p_data)) { in main()
38 free(p_data); in main()
43 free(p_data); in main()
44 free(p_data->data.p_data); in main()
58 NFC_HDR *p_msg = (NFC_HDR *)(p_data->data.p_data); in main()
80 llcp_link_connection_cback(conn_id, event, p_data); in main()
82 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2206/ |
| D | poc.cpp | 53 tNFC_CONN *p_data = (tNFC_CONN *)malloc(sizeof(tNFC_CONN)); in main() local
55 if (!p_data) { in main()
59 p_data->data.p_data = in main()
62 if (!(p_data->data.p_data)) { in main()
63 free(p_data); in main()
75 p_data->status = NFC_STATUS_OK; in main()
76 NFC_HDR *p_resp = (NFC_HDR *)p_data->data.p_data; in main()
80 p_cb->p_cback(0, event, p_data); in main()
82 free(p_data->data.p_data); in main()
83 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2178/ |
| D | poc.cpp | 65 tNFC_CONN* p_data = (tNFC_CONN*)malloc(sizeof(tNFC_CONN)); in main() local
66 if (!p_data) { in main()
69 p_data->data.p_data = (NFC_HDR*)malloc(sizeof(uint8_t) * 16); in main()
70 if (!(p_data->data.p_data)) { in main()
71 free(p_data); in main()
74 p_data->status = NFC_STATUS_OK; in main()
79 NFC_HDR* p_r_apdu = (NFC_HDR*)p_data->data.p_data; in main()
86 p_cb->p_cback(0, event, p_data); in main()
88 free(p_data->data.p_data); in main()
89 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2020-0450/ |
| D | poc.cpp | 45 uint8_t *p_data) = nullptr;
98 size_t rw_i93_send_cmd_write_single_block(uint16_t block_number, uint8_t *p_data) { in rw_i93_send_cmd_write_single_block() argument
102 if (p_data == kVulnPtr) { in rw_i93_send_cmd_write_single_block()
104 if (p_data[n] == DEFAULT_VALUE) { in rw_i93_send_cmd_write_single_block()
110 return real_rw_i93_send_cmd_write_single_block(block_number, p_data); in rw_i93_send_cmd_write_single_block()
133 tNFC_CONN *p_data = (tNFC_CONN *)malloc(sizeof(tNFC_CONN)); in main() local
134 if (!p_data) { in main()
138 p_data->data.p_data = (NFC_HDR *)GKI_getbuf(sizeof(uint8_t) * 16); in main()
139 if (!(p_data->data.p_data)) { in main()
140 free(p_data); in main()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2021/ |
| D | poc.cpp | 46 tNFC_CONN *p_data; variable
82 free(p_data->data.p_data); in poc_cback()
83 free(p_data); in poc_cback()
109 p_data = (tNFC_CONN *) allocate_memory(sizeof(tNFC_CONN)); in main()
110 FAIL_CHECK(p_data); in main()
112 p_data->data.p_data = (NFC_HDR *) allocate_memory(sizeof(NFC_HDR) * 3); in main()
114 if (!(p_data->data.p_data)) { in main()
115 free(p_data); in main()
116 FAIL_CHECK(p_data->data.p_data); in main()
118 vulnPtr = (char *)p_data->data.p_data; in main()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2020-0037/ |
| D | poc.cpp | 88 tNFC_CONN *p_data = (tNFC_CONN *)malloc(sizeof(tNFC_CONN)); in main() local
89 if (!p_data) { in main()
94 p_data->data.p_data = (NFC_HDR *)GKI_getbuf(sizeof(NFC_HDR)); in main()
95 if (!(p_data->data.p_data)) { in main()
96 free(p_data); in main()
102 (p_data->data.p_data)->len = 10; in main()
103 p_data->data.p_data->offset = 0; in main()
104 p_data->status = NFC_STATUS_OK; in main()
106 p_cb->p_cback(0, event, p_data); in main()
108 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2020-0038/ |
| D | poc.cpp | 88 tNFC_CONN *p_data = (tNFC_CONN *)malloc(sizeof(tNFC_CONN)); in main() local
89 if (!p_data) { in main()
94 p_data->data.p_data = (NFC_HDR *)GKI_getbuf(sizeof(NFC_HDR)); in main()
95 if (!(p_data->data.p_data)) { in main()
96 free(p_data); in main()
102 (p_data->data.p_data)->len = 10; in main()
103 p_data->data.p_data->offset = 0; in main()
104 p_data->status = NFC_STATUS_OK; in main()
106 p_cb->p_cback(0, event, p_data); in main()
108 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2020-0039/ |
| D | poc.cpp | 89 tNFC_CONN *p_data = (tNFC_CONN *)malloc(sizeof(tNFC_CONN)); in main() local
90 if (!p_data) { in main()
95 p_data->data.p_data = (NFC_HDR *)GKI_getbuf(sizeof(NFC_HDR)); in main()
96 if (!(p_data->data.p_data)) { in main()
97 free(p_data); in main()
103 (p_data->data.p_data)->len = 10; in main()
104 p_data->data.p_data->offset = 0; in main()
105 p_data->status = NFC_STATUS_OK; in main()
107 p_cb->p_cback(0, event, p_data); in main()
109 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2020-0006/ |
| D | poc.cpp | 66 tNFC_CONN* p_data = (tNFC_CONN*)malloc(sizeof(tNFC_CONN)); in main() local
67 if (!p_data) { in main()
71 p_data->data.p_data = (NFC_HDR*)malloc(sizeof(NFC_HDR)); in main()
72 if (!(p_data->data.p_data)) { in main()
73 free(p_data); in main()
80 p_data->status = NFC_STATUS_OK; in main()
84 p_cb->p_cback(0, event, p_data); in main()
85 free(p_data->data.p_data); in main()
86 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2019/ |
| D | poc.cpp | 50 tNFC_CONN* p_data = (tNFC_CONN*)malloc(sizeof(tNFC_CONN)); in main() local
51 p_data->data.p_data = (NFC_HDR*)malloc(sizeof(uint8_t) * 16); in main()
52 NFC_HDR* p_c_apdu = (NFC_HDR*)p_data->data.p_data; in main()
59 p_cb->p_cback(conn_id, NFC_DATA_CEVT, p_data); in main()
61 free(p_data->data.p_data); in main()
62 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2013/ |
| D | poc.cpp | 132 tRW_DATA* p_data __attribute__((unused))) { in cback() argument
152 tNFC_CONN *p_data = (tNFC_CONN *) allocate_memory(sizeof(tNFC_CONN)); in main() local
153 if (!p_data) { in main()
156 p_data->data.p_data = (NFC_HDR *) allocate_memory(sizeof(NFC_HDR) * 4); in main()
158 if (!(p_data->data.p_data)) { in main()
159 free(p_data); in main()
162 vulnPtr = (char *)p_data->data.p_data; in main()
163 p_data->status = NFC_STATUS_OK; in main()
169 NFC_HDR* p_msg = (p_data->data).p_data; in main()
186 p_cb->p_cback(0, event, p_data); in main()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2021-0925/ |
| D | stubs.cpp | 46 tNFC_STATUS NFC_SendData(uint8_t conn_id, NFC_HDR* p_data) { in NFC_SendData() argument
47 uint8_t* p = (uint8_t*)(p_data + 1) + p_data->offset; in NFC_SendData()
48 uint8_t len = (uint8_t)p_data->len; in NFC_SendData()
51 GKI_freebuf(p_data); in NFC_SendData()
|
| D | t4t.cpp | 43 if (p_rw_data->raw_frame.p_data) { in rw_cback()
44 GKI_freebuf(p_rw_data->raw_frame.p_data); in rw_cback()
45 p_rw_data->raw_frame.p_data = nullptr; in rw_cback()
48 if (p_rw_data->data.p_data) { in rw_cback()
49 GKI_freebuf(p_rw_data->data.p_data); in rw_cback()
50 p_rw_data->data.p_data = nullptr; in rw_cback()
180 .p_data = p_msg, in Fuzz_Run()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2134/ |
| D | poc.cpp | 29 uint8_t p_data = 0xA0; in main() local
33 Mfc_Transceive(&p_data, len); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2133/ |
| D | poc.cpp | 29 uint8_t p_data = 0xA0; in main() local
33 Mfc_Transceive(&p_data, len); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2021-0473/ |
| D | poc.cpp | 111 tNFC_CONN p_data = {}; in main() local
113 p_data.data.p_data = &nfcHdr; in main()
120 p_cb->p_cback(conn_id, event, &p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2018-9584/ |
| D | poc.cpp | 26 static void resp_cback(tNFC_RESPONSE_EVT event, tNFC_RESPONSE *p_data) { in resp_cback() argument
28 (void) p_data; in resp_cback()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2018-9585/ |
| D | poc.cpp | 26 static void resp_cback(tNFC_RESPONSE_EVT event, tNFC_RESPONSE* p_data) { in resp_cback() argument
28 (void) p_data; in resp_cback()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2020-0073/ |
| D | poc.cpp | 24 void rw_t2t_handle_rsp(uint8_t* p_data);
|