Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 779d7734 authored by Devin Moore's avatar Devin Moore
Browse files

Check for malformed Sensor Flattenable 

Test: libsensorserviceaidl_fuzzer with testcase from bug
Bug: 269014004
Change-Id: I0e255c64243c38876fb657cbf942fc1613363216
parent 9bfa4155

libs/sensor/Sensor.cpp

+6 −0
Original line number Diff line number Diff line
@@ -628,7 +628,13 @@ bool Sensor::unflattenString8(void const*& buffer, size_t& size, String8& output 
        return false;

    }

    outputString8.setTo(static_cast<char const*>(buffer), len);



    if (size < FlattenableUtils::align<4>(len)) {

        ALOGE("Malformed Sensor String8 field. Should be in a 4-byte aligned buffer but is not.");

        return false;

    }

    FlattenableUtils::advance(buffer, size, FlattenableUtils::align<4>(len));



    return true;

}