| commit | 7714ccb85ed961083dcc97e230c71242c3422b5e | [log] [tgz] |
|---|---|---|
| author | Adrian Roos <roosa@google.com> | Fri Jun 02 13:57:57 2023 +0000 |
| committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | Wed Dec 11 17:41:34 2024 -0800 |
| tree | 633232ebfc338d60beb52f1a044abc1be2234416 | |
| parent | feb9e146cd2ef26d1521368c5b49a9f75dc6e5c5 [diff] |
InputMethodSubtypeArray: prevent negative count injection Fixes an issue where negative counts could be injected via the Parcel constructor. The writeToParcel method in that case would write data that a subsequent read would not consume. Fixes: 277916797 Fixes: 354682735 Test: atest InputMethodSubtypeArrayTest (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:b9a097e28be9b87566ce0194b7525caf462daf2f) Merged-In: I7e881d82415051179c59bf5df97f8ba0a41e693e Change-Id: I7e881d82415051179c59bf5df97f8ba0a41e693e