Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 38cf7577 authored by Marco Nelissen's avatar Marco Nelissen
Browse files

Fix overflow/dos in 3gg text description parsing 

Bug: 124781927
Test: run pocs
Change-Id: I8765ac9746c3de7d711ef866d4ec0e29972320c0
parent a5175b7a

media/libstagefright/timedtext/TextDescriptions.cpp

+1 −1
Original line number Diff line number Diff line
@@ -383,7 +383,7 @@ status_t TextDescriptions::extract3GPPGlobalDescriptions( 
        tmpData += 8;

        size_t remaining = size - 8;



        if (size < chunkSize) {

        if (chunkSize <= 8 || size < chunkSize) {

            return OK;

        }

        switch(chunkType) {

media/libstagefright/timedtext/TextDescriptions2.cpp

+1 −1
Original line number Diff line number Diff line
@@ -145,7 +145,7 @@ status_t TextDescriptions2::extract3GPPGlobalDescriptions( 
        tmpData += 8;

        size_t remaining = size - 8;



        if (size < chunkSize) {

        if (chunkSize <= 8 || size < chunkSize) {

            return OK;

        }

        switch(chunkType) {