| commit | e4e0ae8abc7f612960fc381a792d0bef4c3eb6f9 | [log] [tgz] |
|---|---|---|
| author | Christopher Tate <ctate@google.com> | Thu Mar 24 16:03:44 2016 -0700 |
| committer | Christopher Tate <ctate@google.com> | Fri Mar 25 12:29:34 2016 -0700 |
| tree | 28aef60b096f7a419cf0f75d70d362c7457a5ec3 | |
| parent | a282c184366bf8b9520ee19fcc1aa7667db7db78 [diff] [blame] |
Guard against failed array allocation Also sanity check the fd count of incoming Parcels. Anything exceeding our actual rlimit is inherently not legit. Bug 26696080 Change-Id: Ib983dce8e8977d7e33195a4ee471115cdaf1c56b
diff --git a/include/binder/Parcel.h b/include/binder/Parcel.h index 44fd59e..2685bcc 100644 --- a/include/binder/Parcel.h +++ b/include/binder/Parcel.h
@@ -425,7 +425,7 @@ mutable bool mFdsKnown; mutable bool mHasFds; bool mAllowFds; - + release_func mOwner; void* mOwnerCookie;