tree 38147235e1cc6649b767028992f9d3a181da7d9f
parent 2c0d6cfc1c9c9abf21e1714a3bfa8c9b68ceab23
author Jeff Tinker <jtinker@google.com> 1524180201 -0700
committer android-build-team Robot <android-build-team-robot@google.com> 1533322924 +0000

Fix security vulnerability in CryptoHal

CryptoHal was not checking that the memory heap set by setHeap
was the same one that was actually used for the decrypt call, allowing
the caller to spoof the decrypt call into accessing arbitrary memory.

bug:76221123
test: mediadrmserverpoc included in the bug & GTS media tests
Change-Id: I35214a1a6d0a4b864123e147d1a1adc2377bfbc5
Merged-in: I4ae6d1080be406bf53e3617c59c75206cc5066c6
(cherry picked from commit 9a9c3ab4d76f03f3abb3756bca9cdfe55c74326a)