| commit | 156304c2b92d0cd83f98984adc1cb543292a0ed1 | [log] [tgz] |
|---|---|---|
| author | Mark Salyzyn <salyzyn@google.com> | Tue Nov 10 15:56:41 2015 -0800 |
| committer | Rom Lemarchand <romlem@google.com> | Mon Nov 16 12:48:58 2015 -0800 |
| tree | 4dbdefca51f6cd78abfbaa15ffc83463ce6a5ad2 | |
| parent | 490ba7a7e79b8baff2a0b087968da6a3ec137fdd [diff] |
logd: klogd: parse error (cherry pick from commit eb298086153a9502bb0b02a1a26919a482b52535) Resolve three areas missing taglen checking. Add some additional limit-checking paranoia. Problem started when p was allowed to go beyond the size of the incoming buffer in some blind p = cp + 1 fragments, placed the check for that after them all before harm could be done, rather than in each location. Bug: 25620123 Change-Id: Ib5687fd30ef0cd3ba3bc0df310b436ad675ccabc