diff options
| author | Tianjie Xu <xunchang@google.com> | 2016-09-21 14:58:11 -0700 |
|---|---|---|
| committer | Jessica Wagantall <jwagantall@cyngn.com> | 2016-12-12 11:57:28 -0800 |
| commit | 420d162484acf9c30693a651702eee5864cf14a1 (patch) | |
| tree | 23ea73c4e3014d10856a24b686cbbb4d8baaf6b6 /libsync | |
| parent | 656154a5b4127370f7317852e224a9121c6beed3 (diff) | |
| download | system_core-420d162484acf9c30693a651702eee5864cf14a1.zip system_core-420d162484acf9c30693a651702eee5864cf14a1.tar.gz system_core-420d162484acf9c30693a651702eee5864cf14a1.tar.bz2 | |
Fix out of bound access in libziparchive
The boundary check of an invalid EOCD record may succeed due to the
overflow of uint32_t. Fix the check.
Test: Open the crash.apk and libziparchive reports the offset error as expected.
CYNGNOS-3312
Bug: 31251826
Change-Id: I1d8092a19b73886a671bc9d291cfc27d65e3d236
(cherry picked from commit ae8180c06dee228cd1378c56afa6020ae98d8a24)
(cherry picked from commit 1ee4892e66ba314131b7ecf17e98bb1762c4b84c)
(cherry picked from commit 7f246f7fdd2f003c6f3701f599052a2040af6bfb)
Diffstat (limited to 'libsync')
0 files changed, 0 insertions, 0 deletions