static int get_command_status(int status, int fct_status, uint32_t cmd_status) {
 if (fct_status != 0)
        status = fct_status;
 else if (cmd_status != 0)
        status = cmd_status;
 return status;
}

The product reads data past the end, or before the beginning, of the intended buffer.