Files
frameworks_base/core/java/android/os
Hani Kazmi 3468327549 Update Parcel readLazyValue to ignore negative object lengths
Addresses a security vulnerability where a (-8) length object would
cause dataPosition to be reset back to the statt of the value, and be
re-read again.

Bug: 240138294
Test: atest ParcelTest BundleTest AmbiguousBundlesTest
Test: manually ran PoC
Change-Id: I1ab1df6f2a802d8cdf02c89c12959b09d7b1a5c4
Merged-In: I1ab1df6f2a802d8cdf02c89c12959b09d7b1a5c4
2022-10-04 17:32:27 +00:00
..
2021-07-14 21:18:40 +00:00
2022-02-18 19:35:01 +00:00
…