Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit 966ee8f6 authored by Songyue Han's avatar Songyue Han Committed by Cherrypicker Worker
Browse files

Fix a couple of OOB read bugs found by the fuzzer.

- Add valid format check to BitmapParams.
- Add full range matrix coefficients to unhandled color space.
- For CbYCrY format when cropWidth is odd, only convert the left (or top) Y with the CbCr to prevent OOB read.
- Convert 10 bits YUV420Planar16 fromat src to 8 bits before reading from it when calling convertYUV420Planar().
- Merge the Y and UV planes address calculation of QCOMYUV420SemiPlanar, TIYUV420PackedSemiPlanar and YUV420SemiPlanar converter as previously the address of UV plane is not calculated correctly for QCOM and TI formats.

Bug: 253300284
Bug: 253270285
Test: color_conversion_fuzzer && atest MediaMetadataRetrieverTest
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:c08c1043f5885aa068aedbdf51d24fe9e263553f)
Merged-In: Ibe4751f50db53fd8842b9f1088b0586c0828e4a4
Change-Id: Ibe4751f50db53fd8842b9f1088b0586c0828e4a4
parent c7d3e049
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment