Merge "Disregard alleged binder entities beyond parcel bounds" into mnc-dev (5a31f1ab) · Commits · e / os / android_frameworks_native

libs/binder/Parcel.cpp

+1 −1

Original line number	Diff line number	Diff line
		@@ -451,7 +451,7 @@ status_t Parcel::appendFrom(const Parcel *parcel, size_t offset, size_t len)
		// Count objects in range
		for (int i = 0; i < (int) size; i++) {
		size_t off = objects[i];
		if ((off >= offset) && (off < offset + len)) {
		if ((off >= offset) && (off + sizeof(flat_binder_object) <= offset + len)) {
		if (firstIndex == -1) {
		firstIndex = i;
		}