Add hardening CHECK in mojojs for large buffers.
Bug: 1316379 Change-Id: I7a3a50cd9c1434cc86b4b2aa45a491c812832a3a Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4742429 Auto-Submit: Jonathan Hao <phao@chromium.org> Reviewed-by: Ken Rockot <rockot@google.com> Commit-Queue: Ken Rockot <rockot@google.com> Cr-Commit-Position: refs/heads/main@{#1179071}
This commit is contained in:

committed by
Chromium LUCI CQ

parent
89c9b4bdc9
commit
6731adcd0c
@ -271,7 +271,7 @@ Message::Message(base::span<const uint8_t> payload,
|
||||
|
||||
void* buffer;
|
||||
uint32_t buffer_size;
|
||||
DCHECK(base::IsValueInRangeForNumericType<uint32_t>(payload.size()));
|
||||
CHECK(base::IsValueInRangeForNumericType<uint32_t>(payload.size()));
|
||||
DCHECK(base::IsValueInRangeForNumericType<uint32_t>(handles.size()));
|
||||
MojoAppendMessageDataOptions options;
|
||||
options.struct_size = sizeof(options);
|
||||
|
Reference in New Issue
Block a user