tag | 667e0cfbdb9e3e6f49e913ca2820b27347fde185 | |
---|---|---|
tagger | The Android Open Source Project <initial-contribution@android.com> | Mon May 04 09:45:34 2020 -0700 |
object | 9158bbcba4ea59a0cbb2aedfac8b5890ca4af144 |
Android 8.0.0 release 46
commit | 9158bbcba4ea59a0cbb2aedfac8b5890ca4af144 | [log] [tgz] |
---|---|---|
author | Jean-Michel Trivi <jmtrivi@google.com> | Mon Sep 10 15:50:19 2018 -0700 |
committer | Rohit Yengisetty <rngy@google.com> | Tue Oct 16 16:11:39 2018 -0700 |
tree | 5b96b28e67221c61381752d17ec03ca9c6792093 | |
parent | de0743934dd504ea4537d0464542f2a423305b8a [diff] |
Prevent out of bounds accesses in lppTransposer() Check validity of pSettings->noOfPatches to prevent out of bounds access in lppTransposer(), which can also cause memSize to be negative. Bug: 112160868 Test: see poc in bug Change-Id: I789030b116da7f8ea261001b43ef6c677dd58a3d Merged-In: I6a2161865d9cb9b51dc37c09d6e3a4a8e5d11f86 (cherry picked from commit 56ef80d7fec1fd9e201262348a96b8660558105a)