tag | 214c5648d811c2398f5831c4bff95283cb79f572 | |
---|---|---|
tagger | The Android Open Source Project <initial-contribution@android.com> | Mon Aug 05 11:44:56 2019 -0700 |
object | acb8702db36d991e4fb0f06833ed3a3403231d28 |
Android 7.1.1 Release 59 (5650809)
commit | acb8702db36d991e4fb0f06833ed3a3403231d28 | [log] [tgz] |
---|---|---|
author | Tianjie Xu <xunchang@google.com> | Fri Sep 07 15:24:58 2018 -0700 |
committer | Rohit Yengisetty <rngy@google.com> | Tue Oct 16 16:05:06 2018 -0700 |
tree | 267c4e9b290a61345b75b253711ff362f193a2c1 | |
parent | 4d93a31203413dc6f4fae5929a2aac552c910ebe [diff] |
DO NOT MERGE: Initialize the ZipArchive to zero before parsing The fields of the ZipArchive on the stack are not initialized before we call libminzip to parse the zip file. As a result, some random memory location is freed unintentionally when we close the ZipArchive upon parsing failures. Bug: 35385357 Test: recompile and run the poc with asan. Change-Id: I7e7f8ab4816c84a158af7389e1a889f8fc65f079 (cherry picked from commit f39f139103f8d06a0ec24f0d45e263f5c56a0c94)
mm -j && m ramdisk-nodeps && m recoveryimage-nodeps # To boot into the new recovery image # without flashing the recovery partition: adb reboot bootloader fastboot boot $ANDROID_PRODUCT_OUT/recovery.img
# After setting up environment and lunch. mmma -j bootable/recovery # Running the tests on device. adb root adb sync data # 32-bit device adb shell /data/nativetest/recovery_unit_test/recovery_unit_test adb shell /data/nativetest/recovery_component_test/recovery_component_test # Or 64-bit device adb shell /data/nativetest64/recovery_unit_test/recovery_unit_test adb shell /data/nativetest64/recovery_component_test/recovery_component_test