| commit | 18a6ada4aa136da4f50f03fff91d61d448ced195 | [log] [tgz] |
|---|---|---|
| author | Ryan Mitchell <rtmitchell@google.com> | Wed May 30 12:17:01 2018 -0700 |
| committer | Ryan Mitchell <rtmitchell@google.com> | Tue Jun 05 22:05:11 2018 +0000 |
| tree | 6e92164af48a4e38ea2a8fbb6fee1a3ebb7f914d | |
| parent | 2d6209f71de8f88526f97526d40304eef626219a [diff] |
Fix DynamicRefTable::load security bug
DynamicRefTables parsed from apks are missing bounds checks that prevent
buffer overflows. This changes verifies the bounds of the header before
attempting to preform operations on the chunk.
Bug: 79488511
Test: run cts -m CtsAppSecurityHostTestCases \
-t android.appsecurity.cts.CorruptApkTests
Change-Id: I02c8ad957da244fce777ac68a482e4e8fa70f846
Merged-In: I02c8ad957da244fce777ac68a482e4e8fa70f846