summaryrefslogtreecommitdiffstats
path: root/tools/aapt
diff options
context:
space:
mode:
authorNobuhiro Hayashi <nobuhiro.hayashi@gmail.com>2012-01-30 18:42:20 +0900
committerNobuhiro Hayashi <nobuhiro.hayashi@gmail.com>2012-03-30 19:23:04 +0900
commitc4293c14083d833bb5d13dc19e73daed8cbbb4ea (patch)
tree1156b525c8c1ca2735e7fdd060374c4a9bc7961d /tools/aapt
parent8ea93aa6adc0e46c8931d31d4f940cdde97c672f (diff)
downloadframeworks_base-c4293c14083d833bb5d13dc19e73daed8cbbb4ea.zip
frameworks_base-c4293c14083d833bb5d13dc19e73daed8cbbb4ea.tar.gz
frameworks_base-c4293c14083d833bb5d13dc19e73daed8cbbb4ea.tar.bz2
aapt: Remove terminal pointer incrementaion
When initialization, 'end' pointer refers terminal character in a string. But it is incremented in while loop. It occurs the access to non-secure memory. Issue detail http://code.google.com/p/android/issues/detail?id=24896 Change-Id: I751d1154d797738c87a66374a66933528c045be5
Diffstat (limited to 'tools/aapt')
-rw-r--r--tools/aapt/ResourceTable.cpp1
1 files changed, 0 insertions, 1 deletions
diff --git a/tools/aapt/ResourceTable.cpp b/tools/aapt/ResourceTable.cpp
index fdb39ca..a417311 100644
--- a/tools/aapt/ResourceTable.cpp
+++ b/tools/aapt/ResourceTable.cpp
@@ -2253,7 +2253,6 @@ bool ResourceTable::getAttributeFlags(
bool failed = false;
while (pos < end && !failed) {
const char16_t* start = pos;
- end++;
while (pos < end && *pos != '|') {
pos++;
}