From 922bf5b4b3513e9d5891dfa14e7a8df6b1773e23 Mon Sep 17 00:00:00 2001
From: iceman1001 <iceman@iuse.se>
Date: Wed, 25 Mar 2026 12:49:43 +0700
Subject: [PATCH] added a sanity check

---
 armsrc/mifaredesfire.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/armsrc/mifaredesfire.c b/armsrc/mifaredesfire.c
index 2ccc12fb2..b5c751876 100644
--- a/armsrc/mifaredesfire.c
+++ b/armsrc/mifaredesfire.c
@@ -323,6 +323,10 @@ void MifareDES_Auth1(uint8_t *datain) {
             memcpy(keybytes, PICC_MASTER_KEY24, 24);
         }
     } else {
+        if (payload->keylen > sizeof(keybytes)) {
+            OnErrorNG(CMD_HF_DESFIRE_AUTH1, PM3_EINVARG);
+            return;
+        }
         memcpy(keybytes, payload->key, payload->keylen);
     }