tag | 3ab437193c29725aa00ffc1d21f7125e33595bd2 | |
---|---|---|
tagger | The Android Open Source Project <initial-contribution@android.com> | Mon May 04 09:46:31 2020 -0700 |
object | fcfcf78dda10addc8c916493372dec539f4e8a5b |
Android 8.1.0 release 76
commit | fcfcf78dda10addc8c916493372dec539f4e8a5b | [log] [tgz] |
---|---|---|
author | Jean-Michel Trivi <jmtrivi@google.com> | Mon Sep 10 15:50:19 2018 -0700 |
committer | Rohit Yengisetty <rngy@google.com> | Tue Oct 16 16:21:15 2018 -0700 |
tree | 46e1a76e378c9f2bd444d36bc4c8e5255f59a38d | |
parent | fac7ba8dde3f38e377206ddce0cdba00dce24745 [diff] |
Prevent out of bounds accesses in lppTransposer() Check validity of pSettings->noOfPatches to prevent out of bounds access in lppTransposer(), which can also cause memSize to be negative. Bug: 112160868 Test: see poc in bug Change-Id: I789030b116da7f8ea261001b43ef6c677dd58a3d Merged-In: I6a2161865d9cb9b51dc37c09d6e3a4a8e5d11f86 (cherry picked from commit 56ef80d7fec1fd9e201262348a96b8660558105a)