Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 37f10abe authored by Wei Jia's avatar Wei Jia Committed by Android Git Automerger
Browse files

am 76dea1de: libstagefright: check overflow before memory allocation in OMXCodec.cpp 

* commit '76dea1de':
  libstagefright: check overflow before memory allocation in OMXCodec.cpp
parents 37ea1d0d 76dea1de

media/libstagefright/OMXCodec.cpp

+3 −0
Original line number Diff line number Diff line
@@ -1658,6 +1658,9 @@ status_t OMXCodec::allocateBuffersOnPort(OMX_U32 portIndex) { 
            def.nBufferCountActual, def.nBufferSize,

            portIndex == kPortIndexInput ? "input" : "output");



    if (def.nBufferSize != 0 && def.nBufferCountActual > SIZE_MAX / def.nBufferSize) {

        return BAD_VALUE;

    }

    size_t totalSize = def.nBufferCountActual * def.nBufferSize;

    mDealer[portIndex] = new MemoryDealer(totalSize, "OMXCodec");