OSDN Git Service

Adds additional sanitization for Zygote command arguments.
authorChris Wailes <chriswailes@google.com>
Fri, 19 Apr 2019 01:25:57 +0000 (18:25 -0700)
committerChristian Wailes <chriswailes@google.com>
Thu, 25 Apr 2019 21:02:15 +0000 (21:02 +0000)
commitc99198249f8bb79487d4f9f0f45b5b2fefaba41a
treec8eb07054c258f3dafd02592cf25e8e567414b08
parent3f35ae068fe1076ca89a2815a601056a1fbb9c94
Adds additional sanitization for Zygote command arguments.

Previously we were only insuring that the arguments provided to the
Zygote didn't contain any newlines.  This adds additional checks for
carriage returns and standalone integer arguments to protect against
malicious argument and packet injection respectively.

Bug: 130164289
Test: m & flash & boot & check logs
Change-Id: I4055c50d52db0047c02c11096710fd07b429660c
core/java/android/os/ZygoteProcess.java