Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 0ea1da27 authored by Abhishek Arya's avatar Abhishek Arya Committed by Android Git Automerger
Browse files

am 5f126c0d: am e93a33a8: am 8cc71bc8: Merge "DO NOT MERGE Part of fix for... 

am 5f126c0d: am e93a33a8: am 8cc71bc8: Merge "DO NOT MERGE Part of fix for libmedia OOB write anywhere" into lmp-dev

* commit '5f126c0d':
  DO NOT MERGE Part of fix for libmedia OOB write anywhere
parents e9b4f50e 5f126c0d

media/libmedia/ICrypto.cpp

+3 −3
Original line number Original line Diff line number Diff line
@@ -257,9 +257,9 @@ status_t BnCrypto::onTransact( 
                    subSamples,

                    subSamples,

                    sizeof(CryptoPlugin::SubSample) * numSubSamples);

                    sizeof(CryptoPlugin::SubSample) * numSubSamples);





            void *dstPtr;

            void *secureBufferId, *dstPtr;

            if (secure) {

            if (secure) {

                dstPtr = reinterpret_cast<void *>(static_cast<uintptr_t>(data.readInt64()));

                secureBufferId = reinterpret_cast<void *>(static_cast<uintptr_t>(data.readInt64()));

            } else {

            } else {

                dstPtr = malloc(totalSize);

                dstPtr = malloc(totalSize);

            }

            }
@@ -272,7 +272,7 @@ status_t BnCrypto::onTransact( 
                    mode,

                    mode,

                    srcData,

                    srcData,

                    subSamples, numSubSamples,

                    subSamples, numSubSamples,

                    dstPtr,

                    secure ? secureBufferId : dstPtr,

                    &errorDetailMsg);

                    &errorDetailMsg);





            reply->writeInt32(result);

            reply->writeInt32(result);