yzy-15 06f201e8e1 fix: harden IPC parcel reading and input validation in form_fwk ...

Check return values of ReadInt64/ReadInt32/ReadBool/ReadString16
in FormMgrStub, FormSupplyStub, and FormInstancesFilter handlers
to prevent use of uninitialized data on parcel read failure.

- Add range validation for FormLocation, FormFsmEvent, PublishFormErrorCode
- Fix integer overflow in time diff comparisons (OnNotifyRefreshForm,
  UpdateReUpdateFormMap)
- Fix TOCTOU race in connectId_ using atomic compare_exchange
- Narrow lock scope in DisconnectAllRenderConnections via std::swap
- Add form owner check in DeleteThemeForm
- Add null checks for callerToken and remoteObject
- Add param length validation in AddForm and AllotThemeRecord
- Fix missing return in HiDumpHasFormVisible
- Change UpdateFormSize return type to void (unused return value)

AI[93%] Human Fixed[0%] Human[7%] AI Adopted[100%]
Co-authored-by: opencode (glm-5.2) <ai@local>

Change-Id: If1210d3b00e3b405045d02f207c0ef1fce2bae80
Signed-off-by: yzy-15 <yuzhiyong6@h-partners.com>

2026-08-19 18:23:09 +08:00

..

form_ability_connection_reporter.h

重构目录调整

2025-03-25 11:47:13 +08:00

form_ability_connection.h

fix: harden IPC parcel reading and input validation in form_fwk

2026-08-19 18:23:09 +08:00