Handle overflow in android::HeifDataSource::readAt (237f9034) · Commits · e / devices / smdk4412 / android_frameworks_av

media/libheif/HeifDecoderImpl.cpp

+5 −0

Original line number	Diff line number	Diff line
		@@ -139,6 +139,11 @@ ssize_t HeifDataSource::readAt(off64_t offset, size_t size) {
		// have been caught above.
		CHECK(offset >= mCachedOffset);

		off64_t resultOffset;
		if (__builtin_add_overflow(offset, size, &resultOffset)) {
		return ERROR_IO;
		}

		if (size == 0) {
		return 0;
		}