Merge "aboot: Check size of unsparsed images before flashing"
diff --git a/app/aboot/aboot.c b/app/aboot/aboot.c
index 1ebc41e..88fc4a5 100644
--- a/app/aboot/aboot.c
+++ b/app/aboot/aboot.c
@@ -1438,6 +1438,11 @@
/* Read and skip over sparse image header */
sparse_header = (sparse_header_t *) data;
+ if ((sparse_header->total_blks * sparse_header->blk_sz) > size) {
+ fastboot_fail("size too large");
+ return;
+ }
+
data += sparse_header->file_hdr_sz;
if(sparse_header->file_hdr_sz > sizeof(sparse_header_t))
{