Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 26b494e2 authored by Frederick Mayle's avatar Frederick Mayle
Browse files

libbinder: Fix out-of-bounds abort in RpcServer 

Bug: 237639446
Test: atest binderRpcTest
Change-Id: Ic35a75fe2b218ef024c6e5e33901813a454243d6
parent 37ebee73

libs/binder/RpcServer.cpp

+3 −1
Original line number Diff line number Diff line
@@ -420,7 +420,9 @@ void RpcServer::establishConnection(sp<RpcServer>&& server, base::unique_fd clie 
            session->setMaxIncomingThreads(server->mMaxThreads);

            if (!session->setProtocolVersion(protocolVersion)) return;



            if (server->mSupportedFileDescriptorTransportModes.test(

            if (header.fileDescriptorTransportMode <

                        server->mSupportedFileDescriptorTransportModes.size() &&

                server->mSupportedFileDescriptorTransportModes.test(

                        header.fileDescriptorTransportMode)) {

                session->setFileDescriptorTransportMode(

                        static_cast<RpcSession::FileDescriptorTransportMode>(