diff options
| author | Fyodor Kupolov <fkupolov@google.com> | 2017-02-27 17:33:18 -0800 |
|---|---|---|
| committer | Fyodor Kupolov <fkupolov@google.com> | 2017-03-03 19:01:24 +0000 |
| commit | 1cbfeef9d8667ba62a263e2cf09ef9c6af4517da (patch) | |
| tree | ee2449b9683f4ea9a0108456a53eda53b61c3f55 /tools/aapt2/java/JavaClassGenerator.cpp | |
| parent | 6f754e48e95410d00382c9a6b694f0a8a655eb63 (diff) | |
[DO NOT MERGE] Check bounds in offsetToPtr
Check whether specified offset belongs to mData.
Also added a default argument bufferSize to check the end offset.
Size of the ashmem descriptor can be modified between
ashmem_get_size_region call and mmap. createFromParcel method was updated
to check ashmem size again immediately after memory is mapped.
Test: manual - using the test app from the bug
Bug: 34128677
Change-Id: I3ecd1616a870ce20941ce9b20a1843d2b4295750
(cherry picked from commit 45e2e95c2ffeb2d978e2cce80b729ef6ada3b8d2)
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator.cpp')
0 files changed, 0 insertions, 0 deletions