Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 5221133b authored by Wei Jia's avatar Wei Jia Committed by Android Git Automerger
Browse files

am b2ae4351: libstagefright: fix overflow in pvdec_api.cpp. 

* commit 'b2ae4351':
  libstagefright: fix overflow in pvdec_api.cpp.
parents 6b52d191 b2ae4351

media/libstagefright/codecs/m4v_h263/dec/src/pvdec_api.cpp

+2 −2
Original line number Diff line number Diff line
@@ -338,7 +338,7 @@ Bool PVAllocVideoData(VideoDecControls *decCtrl, int width, int height, int nLay 
    video->prevVop->uChan = video->prevVop->yChan + size;

    video->prevVop->vChan = video->prevVop->uChan + (size >> 2);

#else

    if (size > INT32_MAX / 3 * 2) {

    if (size > INT32_MAX / 3) {

        return PV_FALSE;

    }

    video->currVop->yChan = (PIXEL *) oscl_malloc(size * 3 / 2); /* Allocate memory for all VOP OKA 3/2/1*/
@@ -368,7 +368,7 @@ Bool PVAllocVideoData(VideoDecControls *decCtrl, int width, int height, int nLay 
        {

            oscl_memset(video->prevEnhcVop, 0, sizeof(Vop));

#ifndef PV_MEMORY_POOL

            if (size > INT32_MAX / 3 * 2) {

            if (size > INT32_MAX / 3) {

                return PV_FALSE;

            }