)]}'
{
  "commit": "1d5fa0a6c7a7252aaca61f034ec9de5d7fa84fe1",
  "tree": "b4bd3e2366744ad2d7acc4d56bc70303f7e8a8cd",
  "parents": [
    "196632fb3c59ebbf1184d791a3e7124dd0c3f22b"
  ],
  "author": {
    "name": "Ken Chen",
    "email": "cken@google.com",
    "time": "Fri Aug 07 19:04:25 2020 +0800"
  },
  "committer": {
    "name": "Anis Assi",
    "email": "anisassi@google.com",
    "time": "Thu Sep 10 13:51:22 2020 -0700"
  },
  "message": "Fix OOB read in DNS resolver\n\nThe remote server specifies resplen, the length of the response it\nintends to send. anssiz represents the size of the destination buffer.\nIf the reported resplen is larger than the anssiz, the code correctly\nonly reads up to anssiz bytes, but returns resplen. so later functions\nwill access far out of bounds.\n\nThe fix ensures that the length of send_vc return does not exceed the\nbuffer size.\n\nBug: 161362564\nTest: build, flash, boot\nTest: atest netd_integration_test\nMerged-In: Id4b5df1be4652e4623847b0b0bad0af65b80fdd5\nChange-Id: Id4b5df1be4652e4623847b0b0bad0af65b80fdd5\n(cherry picked from commit 43264bc36557db9a281b321aab16e574401dfddc)\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "18bb75279bff5937e12568224c3c00b8c558d621",
      "old_mode": 33188,
      "old_path": "libc/dns/resolv/res_send.c",
      "new_id": "81b42a628afbd7f9109138a3c6ecbe56ed1e8389",
      "new_mode": 33188,
      "new_path": "libc/dns/resolv/res_send.c"
    }
  ]
}