Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 17a0b817 authored by Jon Larimer's avatar Jon Larimer Committed by Gerrit Code Review
Browse files

Merge "Fix integer overflow during MP4 atom processing"

parents 322e3602 0b572f5d

media/libstagefright/SampleTable.cpp

+3 −0
Original line number Diff line number Diff line
@@ -230,6 +230,9 @@ status_t SampleTable::setSampleToChunkParams( 
        return ERROR_MALFORMED;

    }



    if (SIZE_MAX / sizeof(SampleToChunkEntry) <= mNumSampleToChunkOffsets)

        return ERROR_OUT_OF_RANGE;



    mSampleToChunkEntries =

        new SampleToChunkEntry[mNumSampleToChunkOffsets];