Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e2393365 authored by Chia-I Wu's avatar Chia-I Wu Committed by android-build-merger
Browse files

libui: add boundary check to GraphicBuffer::unflatten am: bf8d7210 

am: 11ed3dcc

Change-Id: I29e41b7825be1d65aade78e8c536908183112b01
parents 738966bf 11ed3dcc

libs/ui/GraphicBuffer.cpp

+4 −0
Original line number Diff line number Diff line
@@ -377,6 +377,10 @@ status_t GraphicBuffer::flatten(void*& buffer, size_t& size, int*& fds, size_t& 


status_t GraphicBuffer::unflatten(

        void const*& buffer, size_t& size, int const*& fds, size_t& count) {

    if (size < 12 * sizeof(int)) {

        android_errorWriteLog(0x534e4554, "114223584");

        return NO_MEMORY;

    }



    int const* buf = static_cast<int const*>(buffer);