Fyodor Kupolov 45e2e95c2f Check bounds in offsetToPtr ...

Check whether specified offset belongs to mData.
Also added a default argument bufferSize to check the end offset.

Size of the ashmem descriptor can be modified between
ashmem_get_size_region call and mmap. createFromParcel method was updated
to check ashmem size again immediately after memory is mapped.

Test: manual - using the test app from the bug
Bug: 34128677
Change-Id: I3ecd1616a870ce20941ce9b20a1843d2b4295750

2017-02-16 09:50:00 -08:00

11 KiB

Raw Blame History

View Raw