| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2022/ |
| D | poc.cpp | 52 tNFC_CONN *p_data; variable
134 p_data = (tNFC_CONN *) allocate_memory(sizeof(tNFC_CONN)); in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
135 FAIL_CHECK(p_data); in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
137 p_data->data.p_data = (NFC_HDR *) allocate_memory(sizeof(NFC_HDR) * 4); in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
139 if (!(p_data->data.p_data)) { in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
140 free(p_data); in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
141 FAIL_CHECK(p_data->data.p_data); in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
143 vulnPtr = (char *)p_data->data.p_data; in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
144 p_data->status = NFC_STATUS_OK; in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
150 NFC_HDR* p_msg = (p_data->data).p_data; in trigger_OOB_via_rw_t3t_act_handle_fmt_rsp()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2099/ |
| D | poc.cpp | 30 bool nfa_rw_activate_ntf(tNFA_RW_MSG *p_data);
81 tNFA_RW_MSG *p_data = (tNFA_RW_MSG *)malloc(sizeof(tNFA_RW_MSG)); in main() local
82 if (!p_data) { in main()
85 p_data->activate_ntf.p_activate_params = in main()
87 if (!(p_data->activate_ntf.p_activate_params)) { in main()
88 return freeResourcesAndReturn(EXIT_FAILURE, p_data); in main()
91 tNFC_ACTIVATE_DEVT *p_activate_params = p_data->activate_ntf.p_activate_params; in main()
94 nfa_rw_activate_ntf(p_data); in main()
99 return freeResourcesAndReturn(EXIT_FAILURE, p_data, p_data->activate_ntf.p_activate_params); in main()
103 p_rw_data->data.p_data = (NFC_HDR *)malloc(sizeof(NFC_HDR)); in main()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2038/ |
| D | poc.cpp | 48 tNFC_CONN* p_data = (tNFC_CONN*)malloc(sizeof(tNFC_CONN)); in main() local
49 if (!p_data) { in main()
53 p_data->data.p_data = (NFC_HDR*)malloc(sizeof(NFC_HDR)); in main()
54 if (!(p_data->data.p_data)) { in main()
55 free(p_data); in main()
63 p_data->status = NFC_STATUS_OK; in main()
65 NFC_HDR* p_resp = (NFC_HDR*)p_data->data.p_data; in main()
69 p_cb->p_cback(0, event, p_data); in main()
70 free(p_data->data.p_data); in main()
71 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2035/ |
| D | poc.cpp | 49 tNFC_CONN *p_data = (tNFC_CONN *) malloc(sizeof(tNFC_CONN)); in main() local
50 if (!p_data) { in main()
55 p_data->data.p_data = (NFC_HDR *) malloc(sizeof(uint8_t) * 32); in main()
56 if (!(p_data->data.p_data)) { in main()
57 free(p_data); in main()
61 NFC_HDR *p_resp = (NFC_HDR*) p_data->data.p_data; in main()
69 p_data->status = NFC_STATUS_OK; in main()
71 p_cb->p_cback(0, event, p_data); in main()
72 free(p_data->data.p_data); in main()
73 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2039/ |
| D | poc.cpp | 52 tNFC_CONN* p_data = (tNFC_CONN*)malloc(sizeof(tNFC_CONN)); in main() local
53 if (!p_data) { in main()
58 p_data->data.p_data = (NFC_HDR*)malloc(sizeof(uint8_t) * 16); in main()
59 if (!(p_data->data.p_data)) { in main()
60 free(p_data); in main()
68 p_data->status = NFC_STATUS_OK; in main()
70 NFC_HDR* p_resp = (NFC_HDR*)p_data->data.p_data; in main()
74 p_cb->p_cback(0, event, p_data); in main()
75 free(p_data->data.p_data); in main()
76 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2040/ |
| D | poc.cpp | 49 tNFC_CONN *p_data = (tNFC_CONN *)malloc(sizeof(tNFC_CONN)); in main() local
50 if (!p_data) { in main()
55 p_data->data.p_data = (NFC_HDR *)malloc(sizeof(uint8_t) * 16); in main()
56 if (!(p_data->data.p_data)) { in main()
57 free(p_data); in main()
65 p_data->status = NFC_STATUS_OK; in main()
67 NFC_HDR *p_resp = (NFC_HDR *)p_data->data.p_data; in main()
71 p_cb->p_cback(0, event, p_data); in main()
72 free(p_data->data.p_data); in main()
73 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2021-0430/ |
| D | poc.cpp | 28 tNFC_CONN *p_data = nullptr; variable
57 if (p_data) { in exit_handler()
58 if (p_data->data.p_data) { in exit_handler()
59 free(p_data->data.p_data); in exit_handler()
60 p_data->data.p_data = nullptr; in exit_handler()
62 free(p_data); in exit_handler()
63 p_data = nullptr; in exit_handler()
105 p_data = (tNFC_CONN *)malloc(sizeof(tNFC_CONN)); in main()
106 FAIL_CHECK(p_data); in main()
109 p_data->data.p_data = (NFC_HDR *)malloc(sizeof(uint8_t) * 16); in main()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2206/ |
| D | poc.cpp | 53 tNFC_CONN *p_data = (tNFC_CONN *)malloc(sizeof(tNFC_CONN)); in main() local
55 if (!p_data) { in main()
59 p_data->data.p_data = in main()
63 if (!(p_data->data.p_data)) { in main()
64 free(p_data); in main()
76 p_data->status = NFC_STATUS_OK; in main()
77 NFC_HDR *p_resp = (NFC_HDR *)p_data->data.p_data; in main()
81 p_cb->p_cback(0, event, p_data); in main()
83 free(p_data->data.p_data); in main()
84 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2178/ |
| D | poc.cpp | 65 tNFC_CONN* p_data = (tNFC_CONN*)malloc(sizeof(tNFC_CONN)); in main() local
66 if (!p_data) { in main()
70 p_data->data.p_data = (NFC_HDR*)malloc(sizeof(uint8_t) * 16); in main()
71 if (!(p_data->data.p_data)) { in main()
72 free(p_data); in main()
75 p_data->status = NFC_STATUS_OK; in main()
80 NFC_HDR* p_r_apdu = (NFC_HDR*)p_data->data.p_data; in main()
87 p_cb->p_cback(0, event, p_data); in main()
89 free(p_data->data.p_data); in main()
90 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2020-0450/ |
| D | poc.cpp | 45 uint8_t *p_data) = nullptr;
98 size_t rw_i93_send_cmd_write_single_block(uint16_t block_number, uint8_t *p_data) { in rw_i93_send_cmd_write_single_block() argument
102 if (p_data == kVulnPtr) { in rw_i93_send_cmd_write_single_block()
104 if (p_data[n] == DEFAULT_VALUE) { in rw_i93_send_cmd_write_single_block()
110 return real_rw_i93_send_cmd_write_single_block(block_number, p_data); in rw_i93_send_cmd_write_single_block()
133 tNFC_CONN *p_data = (tNFC_CONN *)malloc(sizeof(tNFC_CONN)); in main() local
134 if (!p_data) { in main()
138 p_data->data.p_data = (NFC_HDR *)GKI_getbuf(sizeof(uint8_t) * 16); in main()
139 if (!(p_data->data.p_data)) { in main()
140 free(p_data); in main()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2020-0037/ |
| D | poc.cpp | 88 tNFC_CONN *p_data = (tNFC_CONN *)malloc(sizeof(tNFC_CONN)); in main() local
89 if (!p_data) { in main()
94 p_data->data.p_data = (NFC_HDR *)GKI_getbuf(sizeof(NFC_HDR)); in main()
95 if (!(p_data->data.p_data)) { in main()
96 free(p_data); in main()
102 (p_data->data.p_data)->len = 10; in main()
103 p_data->data.p_data->offset = 0; in main()
104 p_data->status = NFC_STATUS_OK; in main()
106 p_cb->p_cback(0, event, p_data); in main()
108 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2020-0038/ |
| D | poc.cpp | 88 tNFC_CONN *p_data = (tNFC_CONN *)malloc(sizeof(tNFC_CONN)); in main() local
89 if (!p_data) { in main()
94 p_data->data.p_data = (NFC_HDR *)GKI_getbuf(sizeof(NFC_HDR)); in main()
95 if (!(p_data->data.p_data)) { in main()
96 free(p_data); in main()
102 (p_data->data.p_data)->len = 10; in main()
103 p_data->data.p_data->offset = 0; in main()
104 p_data->status = NFC_STATUS_OK; in main()
106 p_cb->p_cback(0, event, p_data); in main()
108 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2015/ |
| D | poc.cpp | 63 tNFA_RW_MSG *p_data = nullptr; variable
66 tNFC_DATA_CEVT* p_data);
67 extern bool nfa_rw_activate_ntf(tNFA_RW_MSG* p_data);
74 extern void rw_t2t_handle_rsp(uint8_t *p_data);
93 if (p_data) { in exit_handler()
94 if (p_data->activate_ntf.p_activate_params) { in exit_handler()
95 free(p_data->activate_ntf.p_activate_params); in exit_handler()
96 p_data->activate_ntf.p_activate_params = nullptr; in exit_handler()
98 free(p_data); in exit_handler()
99 p_data = nullptr; in exit_handler()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2031/ |
| D | poc.cpp | 41 tNFC_CONN *p_data; variable
109 if (p_data) { in exit_handler()
110 if (p_data->data.p_data) { in exit_handler()
111 free(p_data->data.p_data); in exit_handler()
112 p_data->data.p_data = nullptr; in exit_handler()
114 free(p_data); in exit_handler()
115 p_data = nullptr; in exit_handler()
143 p_data = (tNFC_CONN *)allocate_memory(sizeof(tNFC_CONN)); in main()
144 FAIL_CHECK(p_data); in main()
146 p_data->data.p_data = (NFC_HDR *)allocate_memory(sizeof(NFC_HDR) * 3); in main()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2012/ |
| D | poc.cpp | 42 tNFC_CONN *p_data; variable
116 if (p_data) { in exit_handler()
117 if (p_data->data.p_data) { in exit_handler()
118 free(p_data->data.p_data); in exit_handler()
119 p_data->data.p_data = nullptr; in exit_handler()
121 free(p_data); in exit_handler()
122 p_data = nullptr; in exit_handler()
148 p_data = (tNFC_CONN *) allocate_memory(sizeof(tNFC_CONN)); in main()
149 FAIL_CHECK(p_data); in main()
151 p_data->data.p_data = (NFC_HDR *) allocate_memory(sizeof(NFC_HDR) * 4); in main()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2021/ |
| D | poc.cpp | 47 tNFC_CONN *p_data; variable
83 free(p_data->data.p_data); in poc_cback()
84 free(p_data); in poc_cback()
110 p_data = (tNFC_CONN *) allocate_memory(sizeof(tNFC_CONN)); in main()
111 FAIL_CHECK(p_data); in main()
113 p_data->data.p_data = (NFC_HDR *) allocate_memory(sizeof(NFC_HDR) * 3); in main()
115 if (!(p_data->data.p_data)) { in main()
116 free(p_data); in main()
117 FAIL_CHECK(p_data->data.p_data); in main()
119 vulnPtr = (char *)p_data->data.p_data; in main()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2020-0039/ |
| D | poc.cpp | 89 tNFC_CONN *p_data = (tNFC_CONN *)malloc(sizeof(tNFC_CONN)); in main() local
90 if (!p_data) { in main()
95 p_data->data.p_data = (NFC_HDR *)GKI_getbuf(sizeof(NFC_HDR)); in main()
96 if (!(p_data->data.p_data)) { in main()
97 free(p_data); in main()
103 (p_data->data.p_data)->len = 10; in main()
104 p_data->data.p_data->offset = 0; in main()
105 p_data->status = NFC_STATUS_OK; in main()
107 p_cb->p_cback(0, event, p_data); in main()
109 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2020-0006/ |
| D | poc.cpp | 66 tNFC_CONN* p_data = (tNFC_CONN*)malloc(sizeof(tNFC_CONN)); in main() local
67 if (!p_data) { in main()
71 p_data->data.p_data = (NFC_HDR*)malloc(sizeof(NFC_HDR)); in main()
72 if (!(p_data->data.p_data)) { in main()
73 free(p_data); in main()
80 p_data->status = NFC_STATUS_OK; in main()
84 p_cb->p_cback(0, event, p_data); in main()
85 free(p_data->data.p_data); in main()
86 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2019/ |
| D | poc.cpp | 50 tNFC_CONN* p_data = (tNFC_CONN*)malloc(sizeof(tNFC_CONN)); in main() local
52 p_data->data.p_data = (NFC_HDR*)malloc(sizeof(uint8_t) * 16); in main()
53 NFC_HDR* p_c_apdu = (NFC_HDR*)p_data->data.p_data; in main()
60 p_cb->p_cback(conn_id, NFC_DATA_CEVT, p_data); in main()
62 free(p_data->data.p_data); in main()
63 free(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2013/ |
| D | poc.cpp | 133 tRW_DATA* p_data __attribute__((unused))) { in cback() argument
153 tNFC_CONN *p_data = (tNFC_CONN *) allocate_memory(sizeof(tNFC_CONN)); in main() local
154 if (!p_data) { in main()
157 p_data->data.p_data = (NFC_HDR *) allocate_memory(sizeof(NFC_HDR) * 4); in main()
159 if (!(p_data->data.p_data)) { in main()
160 free(p_data); in main()
163 vulnPtr = (char *)p_data->data.p_data; in main()
164 p_data->status = NFC_STATUS_OK; in main()
170 NFC_HDR* p_msg = (p_data->data).p_data; in main()
187 p_cb->p_cback(0, event, p_data); in main()
[all …]
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2019-2017/ |
| D | poc.cpp | 31 uint8_t *p_data = nullptr; variable
34 extern void rw_t2t_handle_rsp(uint8_t *p_data);
39 if (p_data) { in exit_handler()
40 free(p_data); in exit_handler()
41 p_data = nullptr; in exit_handler()
65 p_data = (uint8_t *)malloc(sizeof(uint8_t)); in main()
66 FAIL_CHECK(p_data); in main()
69 rw_t2t_handle_rsp(p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2022-20127/ |
| D | poc.cpp | 96 tNFC_CONN *p_data = (tNFC_CONN *) GKI_getbuf(sizeof(tNFC_CONN)); in main() local
97 p_data->data.p_data = (NFC_HDR *) GKI_getbuf(sizeof(NFC_HDR) + 1); in main()
99 NFC_HDR *p_c_apdu = (NFC_HDR *) p_data->data.p_data; in main()
109 p_cb->p_cback(conn_id, NFC_DATA_CEVT, p_data); in main()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2021-0925/ |
| D | t4t.cpp | 43 if (p_rw_data->raw_frame.p_data) { in rw_cback()
44 GKI_freebuf(p_rw_data->raw_frame.p_data); in rw_cback()
45 p_rw_data->raw_frame.p_data = nullptr; in rw_cback()
48 if (p_rw_data->data.p_data) { in rw_cback()
49 GKI_freebuf(p_rw_data->data.p_data); in rw_cback()
50 p_rw_data->data.p_data = nullptr; in rw_cback()
180 .p_data = p_msg, in Fuzz_Run()
|
| D | stubs.cpp | 46 tNFC_STATUS NFC_SendData(uint8_t conn_id, NFC_HDR* p_data) { in NFC_SendData() argument
47 uint8_t len = (uint8_t)p_data->len; in NFC_SendData()
50 GKI_freebuf(p_data); in NFC_SendData()
|
| /cts/hostsidetests/securitybulletin/securityPatch/CVE-2021-0473/ |
| D | poc.cpp | 111 tNFC_CONN p_data = {}; in main() local
113 p_data.data.p_data = &nfcHdr; in main()
120 p_cb->p_cback(conn_id, event, &p_data); in main()
|