| commit | 1619ed4706a0bf906d967ab7987cd4c475ac3462 | [log] [tgz] |
|---|---|---|
| author | Adam Lesinski <adamlesinski@google.com> | Tue Sep 22 13:02:09 2015 -0700 |
| committer | Nick Kralevich <nnk@google.com> | Thu Oct 01 20:48:23 2015 +0000 |
| tree | 687e37b2d769b27cc4432e253d877ef585cc87d3 | |
| parent | 3089211ce6c279f92cb3ff8ce4137d322ce1ec97 [diff] |
Fix security issues when using Parcel.setDataPosition() with untrusted input When seeking forward in the Parcel, adding the extracted size to the Parcel.dataPosition() can result in an overflow. Guard against this. Bug:23909429 Change-Id: If37cdebbf05a92810300363d1a6ecd8b42b6da26