Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d7234a54 authored by TreeHugger Robot's avatar TreeHugger Robot Committed by Android (Google) Code Review
Browse files

Merge "IAudioPolicyService: Add attribute tags sanitization" into lmp-mr1-dev

parents a54aa363 80bc90d2

include/media/IAudioPolicyService.h

+2 −0
Original line number Diff line number Diff line
@@ -165,6 +165,8 @@ public: 
                                    const Parcel& data,

                                    Parcel* reply,

                                    uint32_t flags = 0);

private:

    void sanetizeAudioAttributes(audio_attributes_t* attr);

};



// ----------------------------------------------------------------------------

media/libmedia/IAudioPolicyService.cpp

+11 −0
Original line number Diff line number Diff line
@@ -799,6 +799,7 @@ status_t BnAudioPolicyService::onTransact( 
            bool hasAttributes = data.readInt32() != 0;

            if (hasAttributes) {

                data.read(&attr, sizeof(audio_attributes_t));

                sanetizeAudioAttributes(&attr);

            }

            audio_session_t session = (audio_session_t)data.readInt32();

            audio_stream_type_t stream = AUDIO_STREAM_DEFAULT;
@@ -864,6 +865,7 @@ status_t BnAudioPolicyService::onTransact( 
            CHECK_INTERFACE(IAudioPolicyService, data, reply);

            audio_attributes_t attr;

            data.read(&attr, sizeof(audio_attributes_t));

            sanetizeAudioAttributes(&attr);

            audio_session_t session = (audio_session_t)data.readInt32();

            uint32_t samplingRate = data.readInt32();

            audio_format_t format = (audio_format_t) data.readInt32();
@@ -1226,6 +1228,15 @@ status_t BnAudioPolicyService::onTransact( 
    }

}



void BnAudioPolicyService::sanetizeAudioAttributes(audio_attributes_t* attr)

{

    const size_t tagsMaxSize = AUDIO_ATTRIBUTES_TAGS_MAX_SIZE;

    if (strnlen(attr->tags, tagsMaxSize) >= tagsMaxSize) {

        android_errorWriteLog(0x534e4554, "68953950"); // SafetyNet logging

    }

    attr->tags[tagsMaxSize - 1] = '\0';

}



// ----------------------------------------------------------------------------



}; // namespace android