Merge changes from topic "am-1ab9514f-fd12-4093-b1cb-a77e9f0419c9" into cw-f-dev
* changes: [automerger] Check for null-terminator in ResStringPool::string8At am:5ec65ae909am:c3d7250b99am:e2417e6682am:0ab4540c41am:a3f0976937am:166aa6e149am:b7f7f7e14eam:c26b8635b7[automerger] Check for null-terminator in ResStringPool::string8At am:5ec65ae909am:c3d7250b99am:e2417e6682am:0ab4540c41am:a3f0976937am:166aa6e149am:b7f7f7e14e[automerger] Check for null-terminator in ResStringPool::string8At am:5ec65ae909am:c3d7250b99am:e2417e6682am:0ab4540c41am:a3f0976937am:166aa6e149[automerger] Check for null-terminator in ResStringPool::string8At am:5ec65ae909am:c3d7250b99am:e2417e6682am:0ab4540c41am:a3f0976937[automerger] Check for null-terminator in ResStringPool::string8At am:5ec65ae909am:c3d7250b99am:e2417e6682am:0ab4540c41[automerger] Check for null-terminator in ResStringPool::string8At am:5ec65ae909am:c3d7250b99am:e2417e6682[automerger] Check for null-terminator in ResStringPool::string8At am:5ec65ae909am:c3d7250b99[automerger] Check for null-terminator in ResStringPool::string8At am:5ec65ae909Check for null-terminator in ResStringPool::string8At
This commit is contained in:
committed by
Android (Google) Code Review
commit
afb1b1aeb6
@@ -807,6 +807,12 @@ const char* ResStringPool::string8At(size_t idx, size_t* outLen) const
|
|||||||
*outLen = decodeLength(&str);
|
*outLen = decodeLength(&str);
|
||||||
size_t encLen = decodeLength(&str);
|
size_t encLen = decodeLength(&str);
|
||||||
if ((uint32_t)(str+encLen-strings) < mStringPoolSize) {
|
if ((uint32_t)(str+encLen-strings) < mStringPoolSize) {
|
||||||
|
// Reject malformed (non null-terminated) strings
|
||||||
|
if (str[encLen] != 0x00) {
|
||||||
|
ALOGW("Bad string block: string #%d is not null-terminated",
|
||||||
|
(int)idx);
|
||||||
|
return NULL;
|
||||||
|
}
|
||||||
return (const char*)str;
|
return (const char*)str;
|
||||||
} else {
|
} else {
|
||||||
ALOGW("Bad string block: string #%d extends to %d, past end at %d\n",
|
ALOGW("Bad string block: string #%d extends to %d, past end at %d\n",
|
||||||
|
|||||||
Reference in New Issue
Block a user