Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 0beb9569 authored by Pawan Wagh's avatar Pawan Wagh
Browse files

Check for null data buffer in AParcel_marshal

Test: m binder_parcel_fuzzer &&
out/host/linux-x86/fuzz/x86_64/binder_parcel_fuzzer/binder_parcel_fuzzer
Bug: 265412053

Change-Id: I2f2b9b82ef1f86ba046deffba6d719c1be433ab5
parent a7546573
Loading
Loading
Loading
Loading
+3 −0
Original line number Diff line number Diff line
@@ -700,6 +700,9 @@ binder_status_t AParcel_marshal(const AParcel* parcel, uint8_t* buffer, size_t s
        return STATUS_BAD_VALUE;
    }
    const uint8_t* internalBuffer = parcel->get()->data();
    if (internalBuffer == nullptr) {
        return STATUS_UNEXPECTED_NULL;
    }
    memcpy(buffer, internalBuffer + start, len);
    return STATUS_OK;
}