Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 5c487ff3 authored by Roger1 Jonsson's avatar Roger1 Jonsson Committed by android-build-merger
Browse files

Merge "Prevent crash for malformed ID3 COMM frame" 

am: 944706f4

Change-Id: I73e84de9a7f3d9ce5a1bbfbf99bd21c610662c4c
parents c84b665c 944706f4

media/libstagefright/id3/ID3.cpp

+3 −0
Original line number Diff line number Diff line
@@ -531,6 +531,9 @@ void ID3::Iterator::getstring(String8 *id, bool otherdata) const { 
    }

    size_t n = mFrameSize - getHeaderLength() - 1;

    if (otherdata) {

        if (n < 5) {

            return;

        }

        // skip past the encoding, language, and the 0 separator

        frameData += 4;

        int32_t i = n - 4;