From: Nobuhiro Hayashi <nobuhiro.hayashi@gmail.com>
Date: Mon, 30 Jan 2012 09:42:20 +0000 (+0900)
Subject: aapt: Remove terminal pointer incrementaion
X-Git-Url: https://git.saurik.com/android/aapt.git/commitdiff_plain/282464ed2d1eb2307b1e560b258344ede0569fbf

aapt: Remove terminal pointer incrementaion

When initialization, 'end' pointer refers terminal
character in a string. But it is incremented in
while loop. It occurs the access to non-secure memory.

Issue detail
  http://code.google.com/p/android/issues/detail?id=24896

Change-Id: I751d1154d797738c87a66374a66933528c045be5
---

diff --git a/ResourceTable.cpp b/ResourceTable.cpp
index fdb39ca..a417311 100644
--- a/ResourceTable.cpp
+++ b/ResourceTable.cpp
@@ -2253,7 +2253,6 @@ bool ResourceTable::getAttributeFlags(
         bool failed = false;
         while (pos < end && !failed) {
             const char16_t* start = pos;
-            end++;
             while (pos < end && *pos != '|') {
                 pos++;
             }