| commit | b7acc399ad02f3c2faa6cdb61a86a3c642418208 | [log] [tgz] |
|---|---|---|
| author | Adrian Roos <roosa@google.com> | Fri Jun 02 13:57:57 2023 +0000 |
| committer | Adrian Roos <roosa@google.com> | Thu Nov 07 17:09:33 2024 +0100 |
| tree | 7e16f38b4874ee7638c1b7c2804d46cc6b896bfa | |
| parent | 600daf1de84848998e2f21849c38fe555690faf7 [diff] |
InputMethodSubtypeArray: prevent negative count injection Fixes an issue where negative counts could be injected via the Parcel constructor. The writeToParcel method in that case would write data that a subsequent read would not consume. Fixes: 277916797 Fixes: 354682735 Test: atest InputMethodSubtypeArrayTest Merged-In: I7e881d82415051179c59bf5df97f8ba0a41e693e Change-Id: I7e881d82415051179c59bf5df97f8ba0a41e693e