commit 97887989495318803643c91b196b6bcabf2a7a03
author Christopher Wiley <wiley@google.com> Tue Oct 27 16:33:47 2015 -0700
committer Christopher Wiley <wiley@google.com> Tue Oct 27 17:42:32 2015 -0700
tree 8de91650894572642e350475e43170953d71b342
parent 0d6d2917cb22ba09da632552c7074d3aa110fbdb

libbinder: Fix out of bounds in readBoolVector

Bug: 25012838
Test: This code now works at runtime.

Change-Id: I3d6b2677f11276e6be4c51451ca36572a4ee573d

libs/binder/Parcel.cpp

diff --git a/libs/binder/Parcel.cpp b/libs/binder/Parcel.cpp
index 70e41e3..48bf799 100644
--- a/libs/binder/Parcel.cpp
+++ b/libs/binder/Parcel.cpp
@@ -1487,8 +1487,8 @@
     /* C++ bool handling means a vector of bools isn't necessarily addressable
      * (we might use individual bits)
      */
-    for (int32_t i = 0; i < size; size++) {
-        bool data;
+    bool data;
+    for (int32_t i = 0; i < size; ++i) {
         status = readBool(&data);
         (*val)[i] = data;