diff options
| author | 2023-06-02 13:57:57 +0000 | |
|---|---|---|
| committer | 2024-11-07 17:09:33 +0100 | |
| commit | 649bb61461b7e0d3b55c55fe9a55792b5fd5c741 (patch) | |
| tree | a6a8bac943a3a3bf07376c61df036fb9ade41210 /libs/androidfw/misc.cpp | |
| parent | 08b8f1652c5f1b940a990952ede3a75fa69f0984 (diff) | |
InputMethodSubtypeArray: prevent negative count injection
Fixes an issue where negative counts could be injected
via the Parcel constructor. The writeToParcel method
in that case would write data that a subsequent read would
not consume.
Fixes: 277916797
Fixes: 354682735
Test: atest InputMethodSubtypeArrayTest
Merged-In: I7e881d82415051179c59bf5df97f8ba0a41e693e
Change-Id: I7e881d82415051179c59bf5df97f8ba0a41e693e
Diffstat (limited to 'libs/androidfw/misc.cpp')
0 files changed, 0 insertions, 0 deletions