Chromium Code Reviews
DescriptionUBSAN: Fix left-shifts of negative values in webusb_descriptors.cc.
ClusterFuzz found that OnReadWebUsbAllowedOriginsHeader and
OnReadBosDescriptorHeader will left-shift the char* returned by
IOBuffer::data() which is undefined if the value is negative. This
pointer should be cast to a uint8_t* before being dereferenced.
BUG=613693
Committed: https://crrev.com/ca857e0b1ee85aaaf8882f0eb5b5c32ea8fae45b
Cr-Commit-Position: refs/heads/master@{#395181}
Patch Set 1 #
Messages
Total messages: 9 (4 generated)
|
|||||||||||||||||||