)]}'
{
  "commit": "ed4eedc690502212b6d340977f13b155fbabe030",
  "tree": "93071ac89a28466c6f8cfda37a4e2ed7b205875e",
  "parents": [
    "a6ff1f594051b6f1c60b2c127a5d0e19afbb4f7f"
  ],
  "author": {
    "name": "Jeremy Meyer",
    "email": "jakmcbane@google.com",
    "time": "Thu May 21 15:46:02 2026 -0700"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Mon Jul 13 16:51:02 2026 -0700"
  },
  "message": "ResStringPool: Validate styleCount and offsets\n\nResStringPool::setTo fails to validate that the style-index array fits\nwithin the data chunk when stringCount is zero, as it was skipping\nvalidation of stringsStart. An attacker could craft a ResStringPool\nwith a large styleCount and a huge stringsStart, bypassing current\nchecks and leading to an OOB heap read in ResStringPool::styleAt.\n\nThis change:\n1. Validates stringsStart and stylesStart against the total size early.\n2. Improves the styleCount bounds check to ensure the style offset array\n   fits within the chunk and doesn\u0027t overlap with string data.\n\nBug: 499091487\nTest: atest libandroidfw_tests --host\nFlag: EXEMPT BUGFIX\n\n(cherry picked from commit 968cb0736ca65b22a3c7230820912adffa452b1e)\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:fd6d49e8bfcc4c42e380e01baf6e186c33916bcb\nMerged-In: I3e1e4579fbda8ee89c5fea3945d523c6e5b72dc9\nChange-Id: I3e1e4579fbda8ee89c5fea3945d523c6e5b72dc9\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "0205d023aef677bb0a08b470dcc10047615f64c5",
      "old_mode": 33188,
      "old_path": "libs/androidfw/ResourceTypes.cpp",
      "new_id": "653ce8241d2dadf6613591da7cc5bf0f5a052f2a",
      "new_mode": 33188,
      "new_path": "libs/androidfw/ResourceTypes.cpp"
    },
    {
      "type": "modify",
      "old_id": "8ef1d0be0a3f2cddd686825e27e406fdd06eb77f",
      "old_mode": 33188,
      "old_path": "libs/androidfw/tests/ResourceTypes_test.cpp",
      "new_id": "0fe6b225e4f32ca07a8502aa8e57bcf5773b1041",
      "new_mode": 33188,
      "new_path": "libs/androidfw/tests/ResourceTypes_test.cpp"
    }
  ]
}