| commit | 48fd7b457bb0657253d6012e787f50498b32ae42 | [log] [tgz] |
|---|---|---|
| author | Dan Austin <danielaustin@google.com> | Thu Sep 10 13:46:02 2015 -0700 |
| committer | Dan Austin <danielaustin@google.com> | Thu Sep 10 14:55:57 2015 -0700 |
| tree | 35b33e1ca9fe8a7e98a45ec3be70dfe034dfd735 | |
| parent | bf04509ff42fc1e179b518caada5d0b663f2a8ee [diff] |
Benign unsigned integer overflow in Parcel The realloc case in continueWrite did not update the gParcelGlobalAllocCount value when an allocation occurred. In addition, there are conditions that could cause the gParcelGlobalAllocCount value to be decremented below 0, resulting in a benign unsigned integer overflow that can cause corrupted values to be returned through system profiling mechanisms. BUG: 23972600 Change-Id: Ibe07db91a811a04b486760eb78d81c926ba8503d