commit 7d4d4232c9891f7124d1ac1cc2db6dc178cc6994
author Ryan Mitchell <rtmitchell@google.com> Wed May 30 12:17:01 2018 -0700
committer android-build-team Robot <android-build-team-robot@google.com> Fri Sep 14 20:45:23 2018 +0000
tree 905c2fcc1685a6b4fa1bd60eb68233f128a6df78
parent a0c74b5e0a921fecaafc4ecb6e4f0f3a4f9042df

Fix DynamicRefTable::load security bug

DynamicRefTables parsed from apks are missing bounds checks that prevent
buffer overflows. This changes verifies the bounds of the header before
attempting to preform operations on the chunk.

Bug: 79488511
Test: run cts -m CtsAppSecurityHostTestCases \
        -t android.appsecurity.cts.CorruptApkTests

Change-Id: I02c8ad957da244fce777ac68a482e4e8fa70f846
Merged-In: I02c8ad957da244fce777ac68a482e4e8fa70f846
(cherry picked from commit 8cf0f988b0c64bcf2c199bb76439c51c257dd162)