diff options
| author | Michael Wachenschwanz <mwachens@google.com> | 2018-08-24 21:50:35 -0700 |
|---|---|---|
| committer | android-build-team Robot <android-build-team-robot@google.com> | 2018-09-10 23:20:02 +0000 |
| commit | 6a947f048a76a5936fd2b693e01f849aef22c907 (patch) | |
| tree | 54326e3b168832fe34d393dcd4f709c7a2b000cc /rs/java/android/renderscript/ProgramFragmentFixedFunction.java | |
| parent | 8e81142af3dceb913ca50f67df3ded84233f932a (diff) | |
Verify number of Map entries written to Parcel
Make sure the number of entries written by Parcel#writeMapInternal
matches the size written. If a mismatch were allowed, an exploitable
scenario could occur where the data read from the Parcel would not
match the data written.
Fixes: 112859604
Test: cts-tradefed run cts -m CtsOsTestCases -t android.os.cts.ParcelTest
Change-Id: I325d08a8b66b6e80fe76501359c41b6656848607
Merged-In: I325d08a8b66b6e80fe76501359c41b6656848607
(cherry picked from commit 057a01d1f38e9b46d3faa4059fdd7c8717681ea0)
Diffstat (limited to 'rs/java/android/renderscript/ProgramFragmentFixedFunction.java')
0 files changed, 0 insertions, 0 deletions