Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit aeb5be6f authored by Josh Gao's avatar Josh Gao Committed by Automerger Merge Worker
Browse files

Merge "adbd: Fix check against valid payload size" am: 596f3b53 am: 9a804947 

Original change: https://android-review.googlesource.com/c/platform/system/core/+/1428117

Change-Id: I6818a334a1a9655cc590805f17f129471d427821
parents 77d4d78d 9a804947

adb/daemon/usb.cpp

+1 −2
Original line number Diff line number Diff line
@@ -584,12 +584,11 @@ struct UsbFfsConnection : public Connection { 
                incoming_header_ = msg;

            } else {

                size_t bytes_left = incoming_header_->data_length - incoming_payload_.size();

                Block payload = std::move(block->payload);

                if (block->payload.size() > bytes_left) {

                    HandleError("received too many bytes while waiting for payload");

                    return false;

                }

                incoming_payload_.append(std::move(payload));

                incoming_payload_.append(std::move(block->payload));

            }



            if (incoming_header_->data_length == incoming_payload_.size()) {