Merge "Disregard alleged binder entities beyond parcel bounds" into mnc-dev

This commit is contained in:
Christopher Tate 2015-06-02 01:05:46 +00:00 committed by Android (Google) Code Review
commit 5a31f1abf6

View File

@ -451,7 +451,7 @@ status_t Parcel::appendFrom(const Parcel *parcel, size_t offset, size_t len)
// Count objects in range // Count objects in range
for (int i = 0; i < (int) size; i++) { for (int i = 0; i < (int) size; i++) {
size_t off = objects[i]; size_t off = objects[i];
if ((off >= offset) && (off < offset + len)) { if ((off >= offset) && (off + sizeof(flat_binder_object) <= offset + len)) {
if (firstIndex == -1) { if (firstIndex == -1) {
firstIndex = i; firstIndex = i;
} }