OSDN Git Service

(root) / android-x86 / frameworks-base.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 857326e) | patch
Fix DynamicRefTable::load security bug
authorRyan Mitchell <rtmitchell@google.com>
Wed, 30 May 2018 19:17:01 +0000 (12:17 -0700)
committerRyan Mitchell <rtmitchell@google.com>
Wed, 6 Jun 2018 17:12:01 +0000 (17:12 +0000)
commit8cf0f988b0c64bcf2c199bb76439c51c257dd162
treec4cd04cf8e6ffb10bcf9cdb64671d4e0cfbd4a51tree | snapshot
parent857326e3731939f6ec7979e1d86585bf0ea484f4commit | diff
Fix DynamicRefTable::load security bug

DynamicRefTables parsed from apks are missing bounds checks that prevent
buffer overflows. This changes verifies the bounds of the header before
attempting to preform operations on the chunk.

Bug: 79488511
Test: run cts -m CtsAppSecurityHostTestCases \
        -t android.appsecurity.cts.CorruptApkTests

Change-Id: I02c8ad957da244fce777ac68a482e4e8fa70f846
Merged-In: I02c8ad957da244fce777ac68a482e4e8fa70f846
libs/androidfw/ResourceTypes.cpp diff | blob | history
frameworks/base
About OSDN
Find Software
Develop Software
Help