Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Fix DynamicRefTable::load security bug" into oc-mr1-dev am: 2b6805fedc am: 5ae85666ac

Browse Source 
am: 6899839e07

Change-Id: I3920ae30c0fdd5ef5b1176476d769abb269d5844
This commit is contained in:
Ryan Mitchell
2018-06-06 16:43:03 -07:00
committed by android-build-merger
parent 5aef9e8d8a 6899839e07
commit 426f8d2db8
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
libs/androidfw/ResourceTypes.cpp
View File

@@ -6824,8 +6824,16 @@ status_t ResTable::parsePackage(const ResTable_package* const pkg,
}
} else if (ctype == RES_TABLE_LIBRARY_TYPE) {
if (group->dynamicRefTable.entries().size() == 0) {
status_t err = group->dynamicRefTable.load((const ResTable_lib_header*) chunk);
const ResTable_lib_header* lib = (const ResTable_lib_header*) chunk;
status_t err = validate_chunk(&lib->header, sizeof(*lib),
endPos, "ResTable_lib_header");
if (err != NO_ERROR) {
return (mError=err);
}
err = group->dynamicRefTable.load(lib);
if (err != NO_ERROR) {
return (mError=err);
}