Merge cherrypicks of [2969924, 2969794, 2969773, 2970233, 2969774, 2969730, 2969731, 2969795, 2969796, 2969797, 2969798, 2969799, 2970191, 2970192, 2970193, 2970194, 2970195, 2970196, 2970197, 2969421, 2969422, 2969423, 2969496, 2969900, 2969564] into nyc-bugfix-release
Change-Id: I0c6b752bf9a53f3e82440b5cf77bca5b8180630d
diff --git a/libutils/Unicode.cpp b/libutils/Unicode.cpp
index ba084f6..bfacf1e 100644
--- a/libutils/Unicode.cpp
+++ b/libutils/Unicode.cpp
@@ -18,6 +18,7 @@
#include <utils/Unicode.h>
#include <stddef.h>
+#include <limits.h>
#if defined(_WIN32)
# undef nhtol
@@ -178,7 +179,15 @@
size_t ret = 0;
const char32_t *end = src + src_len;
while (src < end) {
- ret += utf32_codepoint_utf8_length(*src++);
+ size_t char_len = utf32_codepoint_utf8_length(*src++);
+ if (SSIZE_MAX - char_len < ret) {
+ // If this happens, we would overflow the ssize_t type when
+ // returning from this function, so we cannot express how
+ // long this string is in an ssize_t.
+ android_errorWriteLog(0x534e4554, "37723026");
+ return -1;
+ }
+ ret += char_len;
}
return ret;
}
@@ -438,14 +447,23 @@
size_t ret = 0;
const char16_t* const end = src + src_len;
while (src < end) {
+ size_t char_len;
if ((*src & 0xFC00) == 0xD800 && (src + 1) < end
&& (*(src + 1) & 0xFC00) == 0xDC00) {
// surrogate pairs are always 4 bytes.
- ret += 4;
+ char_len = 4;
src += 2;
} else {
- ret += utf32_codepoint_utf8_length((char32_t) *src++);
+ char_len = utf32_codepoint_utf8_length((char32_t)*src++);
}
+ if (SSIZE_MAX - char_len < ret) {
+ // If this happens, we would overflow the ssize_t type when
+ // returning from this function, so we cannot express how
+ // long this string is in an ssize_t.
+ android_errorWriteLog(0x534e4554, "37723026");
+ return -1;
+ }
+ ret += char_len;
}
return ret;
}
