| commit | 649bb61461b7e0d3b55c55fe9a55792b5fd5c741 | [log] [tgz] |
|---|---|---|
| author | Adrian Roos <roosa@google.com> | Fri Jun 02 13:57:57 2023 +0000 |
| committer | Adrian Roos <roosa@google.com> | Thu Nov 07 17:09:33 2024 +0100 |
| tree | a6a8bac943a3a3bf07376c61df036fb9ade41210 | |
| parent | 08b8f1652c5f1b940a990952ede3a75fa69f0984 [diff] |
InputMethodSubtypeArray: prevent negative count injection Fixes an issue where negative counts could be injected via the Parcel constructor. The writeToParcel method in that case would write data that a subsequent read would not consume. Fixes: 277916797 Fixes: 354682735 Test: atest InputMethodSubtypeArrayTest Merged-In: I7e881d82415051179c59bf5df97f8ba0a41e693e Change-Id: I7e881d82415051179c59bf5df97f8ba0a41e693e