Fyodor Kupolov 1cbfeef9d8 [DO NOT MERGE] Check bounds in offsetToPtr ...

Check whether specified offset belongs to mData.
Also added a default argument bufferSize to check the end offset.

Size of the ashmem descriptor can be modified between
ashmem_get_size_region call and mmap. createFromParcel method was updated
to check ashmem size again immediately after memory is mapped.

Test: manual - using the test app from the bug
Bug: 34128677
Change-Id: I3ecd1616a870ce20941ce9b20a1843d2b4295750
(cherry picked from commit 45e2e95c2f)

2017-03-03 19:01:24 +00:00

11 KiB

Raw Blame History

View Raw