Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 3ec5b395 authored by Sungtak Lee's avatar Sungtak Lee Committed by JP Sugarbroad
Browse files

Handle overflow in android::HeifDataSource::readAt 

Bug: 73782357
Change-Id: I03a5b4c5ddaf2664f342973da7f1a79f29cd7be5
(cherry picked from commit 237f9034)
parent 77028b27

media/libheif/HeifDecoderImpl.cpp

+5 −0
Original line number Diff line number Diff line
@@ -139,6 +139,11 @@ ssize_t HeifDataSource::readAt(off64_t offset, size_t size) { 
    // have been caught above.

    CHECK(offset >= mCachedOffset);



    off64_t resultOffset;

    if (__builtin_add_overflow(offset, size, &resultOffset)) {

        return ERROR_IO;

    }



    if (size == 0) {

        return 0;

    }