diff options
| author | Michael Wachenschwanz <mwachens@google.com> | 2018-08-24 21:50:35 -0700 |
|---|---|---|
| committer | akirilov <akirilov@google.com> | 2018-08-30 13:40:44 -0700 |
| commit | 057a01d1f38e9b46d3faa4059fdd7c8717681ea0 (patch) | |
| tree | fe3e5fa839eaf1cae33e8357fa1eb571593200df /tools/aapt2/java/JavaClassGenerator.cpp | |
| parent | bf441335ea5b02d15c1c9524508c7bb8acc0ed8a (diff) | |
Verify number of Map entries written to Parcel
Make sure the number of entries written by Parcel#writeMapInternal
matches the size written. If a mismatch were allowed, an exploitable
scenario could occur where the data read from the Parcel would not
match the data written.
Fixes: 112859604
Test: cts-tradefed run cts -m CtsOsTestCases -t android.os.cts.ParcelTest
Change-Id: I325d08a8b66b6e80fe76501359c41b6656848607
Merged-In: I325d08a8b66b6e80fe76501359c41b6656848607
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator.cpp')
0 files changed, 0 insertions, 0 deletions