tree e59bf1095f7e653af358f224fc85dd5c95231b45
parent 234ea361175a8fb652690ec4474986bb101a1ac3
author Adrian Roos <roosa@google.com> 1685714277 +0000
committer Adrian Roos <roosa@google.com> 1730995773 +0100

InputMethodSubtypeArray: prevent negative count injection

Fixes an issue where negative counts could be injected
via the Parcel constructor. The writeToParcel method
in that case would write data that a subsequent read would
not consume.

Fixes: 277916797
Fixes: 354682735
Test: atest InputMethodSubtypeArrayTest
Merged-In: I7e881d82415051179c59bf5df97f8ba0a41e693e
Change-Id: I7e881d82415051179c59bf5df97f8ba0a41e693e