| tag | f8483eb33ea68c55f1179d9e4677d36d2a9f9b15 | |
|---|---|---|
| tagger | The Android Open Source Project <initial-contribution@android.com> | Fri Oct 04 16:02:35 2019 -0700 |
| object | 9158bbcba4ea59a0cbb2aedfac8b5890ca4af144 |
Android 8.0.0 Release 39 (5796467)
| commit | 9158bbcba4ea59a0cbb2aedfac8b5890ca4af144 | [log] [tgz] |
|---|---|---|
| author | Jean-Michel Trivi <jmtrivi@google.com> | Mon Sep 10 15:50:19 2018 -0700 |
| committer | Rohit Yengisetty <rngy@google.com> | Tue Oct 16 16:11:39 2018 -0700 |
| tree | 5b96b28e67221c61381752d17ec03ca9c6792093 | |
| parent | de0743934dd504ea4537d0464542f2a423305b8a [diff] |
Prevent out of bounds accesses in lppTransposer() Check validity of pSettings->noOfPatches to prevent out of bounds access in lppTransposer(), which can also cause memSize to be negative. Bug: 112160868 Test: see poc in bug Change-Id: I789030b116da7f8ea261001b43ef6c677dd58a3d Merged-In: I6a2161865d9cb9b51dc37c09d6e3a4a8e5d11f86 (cherry picked from commit 56ef80d7fec1fd9e201262348a96b8660558105a)