YQ-DemoGit / base / 1619ed4706a - Bitbucket

Skip to sidebar navigation
Skip to content

Commits

Adam Lesinski authored and Nick Kralevich committed 1619ed4706a23 九月 2015

Fix security issues when using Parcel.setDataPosition() with untrusted input

When seeking forward in the Parcel, adding the extracted size to the Parcel.dataPosition()
can result in an overflow. Guard against this.

Bug:23909429
Change-Id: If37cdebbf05a92810300363d1a6ecd8b42b6da26