| commit | fb5af331eca64929faa3a9c284e8ebea9a6bb198 | [log] [tgz] |
|---|---|---|
| author | Pengquan Meng <mpq@google.com> | Thu Mar 08 20:08:25 2018 -0800 |
| committer | android-build-team Robot <android-build-team-robot@google.com> | Thu Mar 22 20:42:30 2018 +0000 |
| tree | ea4f8950e75747330c00450c35b5f815355af17d | |
| parent | bafa72fbe98dcff9db5d362dcb485b314c552ddf [diff] |
Fixed Security Vulnerability of DcParamObject The writeToParcel and readFromParcel is not symmetry, fixed it. Test: no test Bug: 70721937 Change-Id: I01f6f6b2ab778ee8b638d9b69fe0a6b9aa7ee395 (cherry picked from commit 8c55a70728fdb0a7b0585fac08629b0137dca51e)
diff --git a/telephony/java/com/android/internal/telephony/DcParamObject.java b/telephony/java/com/android/internal/telephony/DcParamObject.java index 139939c..fc6b610 100644 --- a/telephony/java/com/android/internal/telephony/DcParamObject.java +++ b/telephony/java/com/android/internal/telephony/DcParamObject.java
@@ -36,7 +36,7 @@ } public void writeToParcel(Parcel dest, int flags) { - dest.writeLong(mSubId); + dest.writeInt(mSubId); } private void readFromParcel(Parcel in) {