1. 07 Oct, 2016 9 commits
  2. 26 Sep, 2016 1 commit
  3. 23 Sep, 2016 1 commit
    • Tianjie Xu's avatar
      Fix out of bound access in libziparchive · 1ee4892e
      Tianjie Xu authored
      The boundary check of an invalid EOCD record may succeed due to the
      overflow of uint32_t. Fix the check.
      
      Test: Open the crash.apk and libziparchive reports the offset error as expected.
      
      Bug: 31251826
      Change-Id: I1d8092a19b73886a671bc9d291cfc27d65e3d236
      (cherry picked from commit ae8180c06dee228cd1378c56afa6020ae98d8a24)
      1ee4892e
  4. 21 Sep, 2016 13 commits
  5. 20 Sep, 2016 3 commits
  6. 13 Sep, 2016 1 commit
    • Narayan Kamath's avatar
      libzipfile: add additional validity checks. · a1ec2363
      Narayan Kamath authored
      - Make sure the start and end of the data for a given entry are
        within the allocated buffer.
      - Make sure all central directory entries start and end within the
        central directory buffer.
      - Reject zip file entries that have no filenames.
      
      bug: 30916186
      test: test_zipfile with known bad zip files.
      Change-Id: Ibf3f6469e60c85ec1608f5ce613d40867d2d09b7
      a1ec2363
  7. 08 Sep, 2016 9 commits
  8. 07 Sep, 2016 3 commits