Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit bf8d7210 authored by Chia-I Wu's avatar Chia-I Wu
Browse files

libui: add boundary check to GraphicBuffer::unflatten 

Commit cb496acb removed the boundary
check by accident.

Bug: 114223584
Test: manual
Change-Id: I057bc02d5807e438530d1a5327c2e02b9d154151
parent 370b07ff

libs/ui/GraphicBuffer.cpp

+4 −0
Original line number Diff line number Diff line
@@ -372,6 +372,10 @@ status_t GraphicBuffer::flatten(void*& buffer, size_t& size, int*& fds, size_t& 


status_t GraphicBuffer::unflatten(

        void const*& buffer, size_t& size, int const*& fds, size_t& count) {

    if (size < 12 * sizeof(int)) {

        android_errorWriteLog(0x534e4554, "114223584");

        return NO_MEMORY;

    }



    int const* buf = static_cast<int const*>(buffer);