tree 4e8eaf65a9e72e660679ca6cc84e823e2d9bdbcd
parent b13400e5a56d30902397a3d7f8e42b306614e924
author Yu Shan <shanyu@google.com> 1558376557 -0700
committer Yu Shan <shanyu@google.com> 1558380528 -0700

Fix a bug that would cause OoB memory read.

The magic number in avb_vbmeta_image_verify is checked before the
length is checked, thus if the structure size is less than the magic
number length, OoB memory would be read. This bug is found by running
a fuzz test that gives empty input to this function.

Tests: Added unit test.
Bug: b/133164384
Change-Id: Ib443ea5ee896a8b16fab9fb925637c5f58cc61e5