Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d0af1ded authored by Nick Kralevich's avatar Nick Kralevich Committed by Android Git Automerger
Browse files

am a421314f: am 430475da: resolved conflicts for merge of 0b3eca88 to jb-mr1-dev-plus-aosp 

* commit 'a421314f':
  Prevent integer overflow when processing covr MPEG4 atoms
parents 10ef7f75 a421314f

media/libstagefright/MPEG4Extractor.cpp

+3 −0
Original line number Diff line number Diff line
@@ -1666,6 +1666,9 @@ status_t MPEG4Extractor::parseChunk(off64_t *offset, int depth) { 
            if (mFileMetaData != NULL) {

                ALOGV("chunk_data_size = %lld and data_offset = %lld",

                        chunk_data_size, data_offset);

                if (chunk_data_size >= SIZE_MAX - 1) {

                    return ERROR_MALFORMED;

                }

                sp<ABuffer> buffer = new ABuffer(chunk_data_size + 1);

                if (mDataSource->readAt(

                    data_offset, buffer->data(), chunk_data_size) != (ssize_t)chunk_data_size) {