commit 9e797d05855f232d27db1991cb4e69a154a603b5
author Chris Forbes <chrisforbes@google.com> Wed May 10 13:12:00 2017 -0700
committer android-build-team Robot <android-build-team-robot@google.com> Tue May 30 19:11:51 2017 +0000
tree 383af6483178717983bfd11863c92c53f6c4221a
parent ec1cdf05ff1433be557eab8cf13186e0bd1a9086

ui: Fix bad size check in Fence::unflatten

Differs slightly from mnc+ patch: GetFlattenedSize was fixed in mnc.

Test: Boot device, run poc from bug, observe no longer crashes
Bug: 37285689
Change-Id: Id8b851733b088cce0d07493fbf76e7e24f9299ad
(cherry picked from commit 9809602ac32dcb7bceaa5bc34df5b7fb68aacd38)

libs/ui/Fence.cpp

diff --git a/libs/ui/Fence.cpp b/libs/ui/Fence.cpp
index 7cf8233..5531b23 100644
--- a/libs/ui/Fence.cpp
+++ b/libs/ui/Fence.cpp
@@ -162,7 +162,7 @@
         return INVALID_OPERATION;
     }
 
-    if (size < 1) {
+    if (size < getFlattenedSize()) {
         return NO_MEMORY;
     }