Android 7.0.0 release 27
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEABECAAYFAlhulLwACgkQ6K0/gZqxDnioAQCgiSK4fOQbk1NV14U61ZYLi46K
/w0AnjTQd5dTBoWISq7QsMQbXYvpxuxA
=+0u8
-----END PGP SIGNATURE-----
Fix out of bound access in libziparchive

The boundary check of an invalid EOCD record may succeed due to the
overflow of uint32_t. Fix the check.

Test: Open the crash.apk and libziparchive reports the offset error as expected.

Bug: 31251826
Change-Id: I1d8092a19b73886a671bc9d291cfc27d65e3d236
(cherry picked from commit ae8180c06dee228cd1378c56afa6020ae98d8a24)
(cherry picked from commit 1ee4892e66ba314131b7ecf17e98bb1762c4b84c)
1 file changed