Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 1ce2364a authored by Jeff Tinker's avatar Jeff Tinker Committed by android-build-merger
Browse files

Fix integer overflow in mediadrmserver am: eb21712f am: 5250bc1b am:... 

Fix integer overflow in mediadrmserver am: eb21712f am: 5250bc1b am: d1a854a0 am: 7a22df06 am: 4e339cbc am: 1248e620 am: fdfb9d20 am: a64aff45 am: 87e07668
am: 8d214cd0

Change-Id: I95ccb284cfa1afc9997279c307bd13d2e2387a77
parents a5d6111e 8d214cd0

drm/mediadrm/plugins/clearkey/InitDataParser.cpp

+1 −1
Original line number Diff line number Diff line
@@ -114,7 +114,7 @@ android::status_t InitDataParser::parsePssh(const Vector<uint8_t>& initData, 
    memcpy(&keyIdCount, &initData[readPosition], sizeof(keyIdCount));

    keyIdCount = ntohl(keyIdCount);

    readPosition += sizeof(keyIdCount);

    if (readPosition + (keyIdCount * kKeyIdSize) !=

    if (readPosition + ((uint64_t)keyIdCount * kKeyIdSize) !=

            initData.size() - sizeof(uint32_t)) {

        return android::ERROR_DRM_CANNOT_HANDLE;

    }