Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c0da9933 authored by Andy Hung's avatar Andy Hung Committed by android-build-merger
Browse files

Check effect command reply size in AudioFlinger am: 110bc954 am: 075c8f77... 

Check effect command reply size in AudioFlinger am: 110bc954 am: 075c8f77 am: c971a59f am: 195f7c61 am: 1e1b7e4c am: d34a9dfc am: 4d942ffd am: 97dc6890 am: 96727e67 am: 2072f925
am: 807b3257

Change-Id: If0a3ddbf84c520434f88ad5f6f02fd854cf8c4aa
parents ef7c297e 807b3257

services/audioflinger/Effects.cpp

+6 −0
Original line number Original line Diff line number Diff line
@@ -558,6 +558,12 @@ status_t AudioFlinger::EffectModule::command(uint32_t cmdCode, 
    if (mStatus != NO_ERROR) {

    if (mStatus != NO_ERROR) {

        return mStatus;

        return mStatus;

    }

    }

    if (cmdCode == EFFECT_CMD_GET_PARAM &&

            (*replySize < sizeof(effect_param_t) ||

                    ((effect_param_t *)pCmdData)->psize > *replySize - sizeof(effect_param_t))) {

        android_errorWriteLog(0x534e4554, "29251553");

        return -EINVAL;

    }

    status_t status = (*mEffectInterface)->command(mEffectInterface,

    status_t status = (*mEffectInterface)->command(mEffectInterface,

                                                   cmdCode,

                                                   cmdCode,

                                                   cmdSize,

                                                   cmdSize,