Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 4d46f6f1 authored by Marco Nelissen's avatar Marco Nelissen
Browse files

Check RTSP payload length 

Bug: 23346388
Change-Id: Ifd918cefc90527c2f52177c3ce0da7a13259ad08
parent f97b6bee

media/libstagefright/rtsp/AMPEG4AudioAssembler.cpp

+3 −2
Original line number Diff line number Diff line
@@ -405,7 +405,8 @@ sp<ABuffer> AMPEG4AudioAssembler::removeLATMFraming(const sp<ABuffer> &buffer) { 
            }

        }

        

        CHECK_LE(offset + payloadLength, buffer->size());

        CHECK_LT(offset, buffer->size());

        CHECK_LE(payloadLength, buffer->size() - offset);



        memcpy(out->data() + out->size(), &ptr[offset], payloadLength);

        out->setRange(0, out->size() + payloadLength);