libsysutils: Fix vold vulnerability in FrameworkListener
Don't release the sender socket when FrameworkListener receives a command that exceed the maximum buffer length Bug: https://issuetracker.google.com/issues/62812018 Test: manual Change-Id: I160f504f3fb902ba25fc79deb8ae7d78d811a807
This commit is contained in:
parent
4c28ca1ac8
commit
d3c86412ad
1 changed files with 1 additions and 1 deletions
|
@ -68,7 +68,7 @@ bool FrameworkListener::onDataAvailable(SocketClient *c) {
|
|||
android_errorWriteLog(0x534e4554, "29831647");
|
||||
c->sendMsg(500, "Command too large for buffer", false);
|
||||
mSkipToNextNullByte = true;
|
||||
return false;
|
||||
return true;
|
||||
}
|
||||
|
||||
int offset = 0;
|
||||
|
|
Loading…
Reference in a new issue