commit | 6f503758fad2cbcf8359e8f0af32e4d79a2a48ae | [log] [tgz] |
---|---|---|
author | Doug Zongker <dougz@google.com> | Fri May 16 14:58:17 2014 +0000 |
committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | Fri May 16 14:58:17 2014 +0000 |
tree | f344a7dd6e208c628556110ee51bcb6901e500c0 | |
parent | 23e322ab19fb7d74c2c37e40ce364d9f709bdcee [diff] | |
parent | 4d054795b673855e3a7556c6f2f7ab99ca509998 [diff] |
Merge "fix vulnerability in bspatch"
diff --git a/bspatch.c b/bspatch.c index 3ef698f..61de4d5 100644 --- a/bspatch.c +++ b/bspatch.c
@@ -152,6 +152,11 @@ ctrl[i]=offtin(buf); }; + // android local change (start) + if (ctrl[0]<0||ctrl[1]<0) + errx(1,"Corrupt patch\n"); + // android local change (end) + /* Sanity-check */ if(newpos+ctrl[0]>newsize) errx(1,"Corrupt patch\n");