| commit | 38d27e7b462c4b4ada2d21c63b29b31ac1a35c54 | [log] [tgz] |
|---|---|---|
| author | Edwin Wong <edwinwong@google.com> | Mon Nov 25 19:06:28 2019 -0800 |
| committer | Edwin Wong <edwinwong@google.com> | Wed Jan 08 01:19:10 2020 +0000 |
| tree | 26bc94b26cee4fd4e9f8addc7ad3257db45ca34e | |
| parent | f9cd09f66c901d68f4dc6b44876b87b98b640161 [diff] |
Fix heap buffer overflow for releaseSecureStops. If the input SecureStopRelease size is less than sizeof(uint32_t) in releaseSecureStops(), an out of bound read will occur. bug: 144766455 bug: 144746235 bug: 147281068 Test: sts ANDROID_BUILD_TOP= ./android-sts/tools/sts-tradefed run sts-engbuild-no-spl-lock -m StsHostTestCases --test android.security.sts.Poc19_11#testPocBug_144766455 Change-Id: I8c89797869addf83342a4f32e17bce0515713119