Android 8.1.0 release 74
-----BEGIN PGP SIGNATURE-----

iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCXl1q5wAKCRDorT+BmrEO
eP2fAJoDL/Q6u6EpH0vuwp0kq5d5jAtZlgCeLdcGrH1J8L2wKCGhZ9liTQBnFxA=
=hlf0
-----END PGP SIGNATURE-----
Prevent out of bounds accesses in lppTransposer()

Check validity of pSettings->noOfPatches to prevent out of bounds
  access in lppTransposer(), which can also cause memSize to be
  negative.

Bug: 112160868
Test: see poc in bug
Change-Id: I789030b116da7f8ea261001b43ef6c677dd58a3d
Merged-In: I6a2161865d9cb9b51dc37c09d6e3a4a8e5d11f86
(cherry picked from commit 56ef80d7fec1fd9e201262348a96b8660558105a)
2 files changed