Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 824b1670 authored by Sunid Wilson's avatar Sunid Wilson Committed by Linux Build Service Account
Browse files

camera: Fix vendor tag descriptor corruption during binder transaction 

For 64 bit platforms, size_t is 64 bit. Section count was not initialized
correctly. Hence the upper 32 bit of sectionCount will be corrupted and
lower 32 bit will be updated by the binder transaction leading to crash.

Change-Id: I35a4a750a5dbd8e696d14851130f2daf73014c3e
parent b0e2b526

camera/VendorTagDescriptor.cpp

+1 −1
Original line number Diff line number Diff line
@@ -206,7 +206,7 @@ status_t VendorTagDescriptor::createFromParcel(const Parcel* parcel, 
        return res;

    }



    size_t sectionCount;

    size_t sectionCount = 0;

    if (tagCount > 0) {

        if ((res = parcel->readInt32(reinterpret_cast<int32_t*>(&sectionCount))) != OK) {

            ALOGE("%s: could not read section count for.", __FUNCTION__);