| commit | c99198249f8bb79487d4f9f0f45b5b2fefaba41a | [log] [tgz] |
|---|---|---|
| author | Chris Wailes <chriswailes@google.com> | Thu Apr 18 18:25:57 2019 -0700 |
| committer | Christian Wailes <chriswailes@google.com> | Thu Apr 25 21:02:15 2019 +0000 |
| tree | c8eb07054c258f3dafd02592cf25e8e567414b08 | |
| parent | 3f35ae068fe1076ca89a2815a601056a1fbb9c94 [diff] |
Adds additional sanitization for Zygote command arguments. Previously we were only insuring that the arguments provided to the Zygote didn't contain any newlines. This adds additional checks for carriage returns and standalone integer arguments to protect against malicious argument and packet injection respectively. Bug: 130164289 Test: m & flash & boot & check logs Change-Id: I4055c50d52db0047c02c11096710fd07b429660c