Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 8c8eb964 authored by Andy Hung's avatar Andy Hung Committed by android-build-merger
Browse files

Effects: Check get parameter command size am: 3d34cc76 am: 59920bf7 am:... 

Effects: Check get parameter command size am: 3d34cc76 am: 59920bf7 am: 14d87911 am: 79a088a0 am: 58e5681c am: f0f864a1 am: 134e2084 am: 5662efe7
am: 1ad93b96

Change-Id: I0b66ac456a906d813da5c9b9caf5b572b7b371a2
parents 1606a120 1ad93b96

services/audioflinger/Effects.cpp

+7 −0
Original line number Original line Diff line number Diff line
@@ -571,6 +571,13 @@ status_t AudioFlinger::EffectModule::command(uint32_t cmdCode, 
        android_errorWriteLog(0x534e4554, "29251553");

        android_errorWriteLog(0x534e4554, "29251553");

        return -EINVAL;

        return -EINVAL;

    }

    }

    if (cmdCode == EFFECT_CMD_GET_PARAM &&

            (sizeof(effect_param_t) > cmdSize ||

                    ((effect_param_t *)pCmdData)->psize > cmdSize

                                                          - sizeof(effect_param_t))) {

        android_errorWriteLog(0x534e4554, "32438594");

        return -EINVAL;

    }

    if ((cmdCode == EFFECT_CMD_SET_PARAM

    if ((cmdCode == EFFECT_CMD_SET_PARAM

            || cmdCode == EFFECT_CMD_SET_PARAM_DEFERRED) &&  // DEFERRED not generally used

            || cmdCode == EFFECT_CMD_SET_PARAM_DEFERRED) &&  // DEFERRED not generally used

        (sizeof(effect_param_t) > cmdSize

        (sizeof(effect_param_t) > cmdSize