Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 45d31391 authored by Jeff Tinker's avatar Jeff Tinker Committed by Android Git Automerger
Browse files

am fa8ebb45: Check integer overflow to prevent memory corruption 

* commit 'fa8ebb45':
  Check integer overflow to prevent memory corruption
parents 3b770a61 fa8ebb45

media/libstagefright/DRMExtractor.cpp

+2 −1
Original line number Diff line number Diff line
@@ -186,7 +186,8 @@ status_t DRMSource::read(MediaBuffer **buffer, const ReadOptions *options) { 


            srcOffset += mNALLengthSize;



            if (srcOffset + nalLength > len) {

            size_t end = srcOffset + nalLength;

            if (end > len || end < srcOffset) {

                if (decryptedDrmBuffer.data) {

                    delete [] decryptedDrmBuffer.data;

                    decryptedDrmBuffer.data = NULL;