* commit 'aeac647a003c48cc8570b6c87513f0e45ea7f30e': Don't corrupt parcel when writeFileDescriptor() fails
This commit is contained in:
commit
2ba1c4d6f3
@ -1013,6 +1013,15 @@ status_t Parcel::writeObject(const flat_binder_object& val, bool nullMetaData)
|
||||
restart_write:
|
||||
*reinterpret_cast<flat_binder_object*>(mData+mDataPos) = val;
|
||||
|
||||
// remember if it's a file descriptor
|
||||
if (val.type == BINDER_TYPE_FD) {
|
||||
if (!mAllowFds) {
|
||||
// fail before modifying our object index
|
||||
return FDS_NOT_ALLOWED;
|
||||
}
|
||||
mHasFds = mFdsKnown = true;
|
||||
}
|
||||
|
||||
// Need to write meta-data?
|
||||
if (nullMetaData || val.binder != 0) {
|
||||
mObjects[mObjectsSize] = mDataPos;
|
||||
@ -1020,14 +1029,6 @@ restart_write:
|
||||
mObjectsSize++;
|
||||
}
|
||||
|
||||
// remember if it's a file descriptor
|
||||
if (val.type == BINDER_TYPE_FD) {
|
||||
if (!mAllowFds) {
|
||||
return FDS_NOT_ALLOWED;
|
||||
}
|
||||
mHasFds = mFdsKnown = true;
|
||||
}
|
||||
|
||||
return finishWrite(sizeof(flat_binder_object));
|
||||
}
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user