c5fe5044f4
Checks that the slot number received from mGraphicBufferProducer in Surface::dequeueBuffer is on the interval [0, NUM_BUFFER_SLOTS) to protect against a malicious BnGraphicBufferProducer. Bug: 36991414 AOSP-Change-Id: I1a76fd1bcce1c558f1c0c30f03638278288ed4fa (cherry picked from commit 90ce2a9c1d3af422c66b4061805831cb208263d8) CVE-2017-0665 Change-Id: If0fd4864b9fc4ea5a1c83d10adef26cdabb0f7e8 |
||
---|---|---|
build | ||
cmds | ||
data/etc | ||
docs | ||
include | ||
libs | ||
opengl | ||
services | ||
MODULE_LICENSE_APACHE2 | ||
NOTICE |