diff options
| author | 2022-08-29 17:40:14 -0400 | |
|---|---|---|
| committer | 2022-09-01 18:54:01 +0000 | |
| commit | 1fcd99f5aa3490431154d1e80b854aafab821345 (patch) | |
| tree | 20761835a480a0b3d39dbf10e4f56aa07ea2366e /libs/androidfw/StringPool.cpp | |
| parent | 1ee3c74d2effe065a2cdcced84f0a36c48b3d043 (diff) | |
Trim any long string inputs that come in to AutomaticZenRule
This change both prevents any rules from being unable to be written to disk and also avoids risk of running out of memory while handling all the zen rules.
Bug: 242703460
Bug: 242703505
Bug: 242703780
Bug: 242704043
Bug: 243794204
Test: cts AutomaticZenRuleTest; atest android.app.AutomaticZenRuleTest; manually confirmed each exploit example either saves the rule successfully with a truncated string (in the case of name & conditionId) or may fail to save the rule at all (if the owner/configactivity is invalid). Additionally ran the memory-exhausting PoC without device crashes.
Change-Id: I110172a43f28528dd274b3b346eb29c3796ff2c6
Merged-In: I110172a43f28528dd274b3b346eb29c3796ff2c6
(cherry picked from commit de172ba0d434c940be9e2aad8685719731ab7da2)
Diffstat (limited to 'libs/androidfw/StringPool.cpp')
0 files changed, 0 insertions, 0 deletions