tree bafc0debe12ae6dde9df18b2ae54eaede2c561cf
parent 9b233b4b8d501c43c2eb6ed27514df8b477b52be
author Dan Stoza <stoza@google.com> 1493681513 -0700
committer Dirk Vogt <dirk@fairphone.com> 1497874062 +0200

libgui: Check slot received from IGBP in Surface

Checks that the slot number received from mGraphicBufferProducer in
Surface::dequeueBuffer is on the interval [0, NUM_BUFFER_SLOTS) to
protect against a malicious BnGraphicBufferProducer.

FPIIM-1128
FPIIM-1126

Bug: 36991414
Change-Id: I1a76fd1bcce1c558f1c0c30f03638278288ed4fa
(cherry picked from commit 90ce2a9c1d3af422c66b4061805831cb208263d8)