replicant-frameworks_native/libs
Dan Stoza c5fe5044f4 libgui: Check slot received from IGBP in Surface
Checks that the slot number received from mGraphicBufferProducer in
Surface::dequeueBuffer is on the interval [0, NUM_BUFFER_SLOTS) to
protect against a malicious BnGraphicBufferProducer.

Bug: 36991414
AOSP-Change-Id: I1a76fd1bcce1c558f1c0c30f03638278288ed4fa
(cherry picked from commit 90ce2a9c1d3af422c66b4061805831cb208263d8)

CVE-2017-0665

Change-Id: If0fd4864b9fc4ea5a1c83d10adef26cdabb0f7e8
2017-07-06 21:31:56 +02:00
..
binder Correct overflow check in Parcel resize code 2017-03-13 04:55:32 +00:00
diskusage Add missing <unistd.h> include for close. 2015-02-19 16:58:44 -08:00
gui libgui: Check slot received from IGBP in Surface 2017-07-06 21:31:56 +02:00
input add number constraint for samples per MotionEvent am: 5d17838ade am: 72c8ca4a01 am: 9964d83869 am: 90dc6dc825 2015-10-22 22:28:01 +00:00
ui Android 6.0.1 release 66 2016-09-07 12:40:28 -07:00