commit | fa237c4f76b7b9369d9c499bfdc81e5072ddde86 | [log] [tgz] |
---|---|---|
author | Edwin Wong <edwinwong@google.com> | Wed Nov 27 10:46:17 2019 -0800 |
committer | Edwin Wong <edwinwong@google.com> | Wed Jan 08 02:32:59 2020 +0000 |
tree | 602110097b4e474c12c38c6cc635f746219e42e1 | |
parent | 8f72d008d0c51da507fc3c447e68e02b9e2d8535 [diff] |
[DO NOT MERGE] Fix heap buffer overflow for releaseSecureStops. If the input SecureStopRelease size is less than sizeof(uint32_t) in releaseSecureStops(), an out of bound read will occur. bug: 144766455 bug: 144746235 bug: 147281068 Test: sts ANDROID_BUILD_TOP= ./android-sts/tools/sts-tradefed run sts-engbuild-no-spl-lock -m StsHostTestCases --test android.security.sts.Poc19_11#testPocBug_144766455 Change-Id: Ieccdd86ad86966fbf1dde70d3b3fb73d6dd124a4