| commit | 74fd4497bf69fcf77a45a63761c041aa4fcfadd4 | [log] [tgz] |
|---|---|---|
| author | Dan Stoza <stoza@google.com> | Mon May 01 16:31:53 2017 -0700 |
| committer | android-build-team Robot <android-build-team-robot@google.com> | Wed May 24 22:46:59 2017 +0000 |
| tree | dd2b4fe6b15c9588b7fd80c79df1ff5ba9e4df45 | |
| parent | 947031c9d68097dcdaec93ac3f1476b1ff6d0ff6 [diff] |
libgui: Check slot received from IGBP in Surface Checks that the slot number received from mGraphicBufferProducer in Surface::dequeueBuffer is on the interval [0, NUM_BUFFER_SLOTS) to protect against a malicious BnGraphicBufferProducer. Bug: 36991414 Change-Id: I1a76fd1bcce1c558f1c0c30f03638278288ed4fa (cherry picked from commit 90ce2a9c1d3af422c66b4061805831cb208263d8)