Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 11ed3dcc authored by Chia-I Wu's avatar Chia-I Wu Committed by android-build-merger
Browse files

libui: add boundary check to GraphicBuffer::unflatten 

am: bf8d7210

Change-Id: Ia2ccc52e854e324cebd978ca648de438c23ae660
parents b529ce58 bf8d7210

libs/ui/GraphicBuffer.cpp

+4 −0
Original line number Diff line number Diff line
@@ -372,6 +372,10 @@ status_t GraphicBuffer::flatten(void*& buffer, size_t& size, int*& fds, size_t& 


status_t GraphicBuffer::unflatten(

        void const*& buffer, size_t& size, int const*& fds, size_t& count) {

    if (size < 12 * sizeof(int)) {

        android_errorWriteLog(0x534e4554, "114223584");

        return NO_MEMORY;

    }



    int const* buf = static_cast<int const*>(buffer);