commit 489931b6ce22434b943bdf8381b376f429b58633
author Christopher Wiley <wiley@google.com> Tue Oct 27 16:33:47 2015 -0700
committer Alex Deymo <deymo@google.com> Tue Nov 17 17:49:21 2015 -0800
tree b26c79cfe1adf2179fea2e9c2028918c5cba9f1f
parent 210648c40e7c2001cc2a52df532a6ae8f89ac029

libbinder: Fix out of bounds in readBoolVector

Bug: 25012838
Test: This code now works at runtime.

(cherry picked from commit 97887989495318803643c91b196b6bcabf2a7a03)

Change-Id: If9b69836092f40d121a7e62d890c2e1c41080448

libs/binder/Parcel.cpp

diff --git a/libs/binder/Parcel.cpp b/libs/binder/Parcel.cpp
index 16a20cf..29cd8cb 100644
--- a/libs/binder/Parcel.cpp
+++ b/libs/binder/Parcel.cpp
@@ -1511,8 +1511,8 @@
     /* C++ bool handling means a vector of bools isn't necessarily addressable
      * (we might use individual bits)
      */
-    for (int32_t i = 0; i < size; size++) {
-        bool data;
+    bool data;
+    for (int32_t i = 0; i < size; ++i) {
         status = readBool(&data);
         (*val)[i] = data;