Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d8dad277 authored by Iván Budnik's avatar Iván Budnik Committed by Automerger Merge Worker
Browse files

Fix Out of Bounds read in TextDescriptions.cpp am: b63d4e78 am: a18815ba 

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/av/+/18993507



Change-Id: I0ffcaccbef809d71f4b4c7e32e2c4f640844c9f2
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents b2c01cbb a18815ba

media/libstagefright/timedtext/TextDescriptions.cpp

+4 −0
Original line number Diff line number Diff line
@@ -466,6 +466,10 @@ status_t TextDescriptions::extract3GPPGlobalDescriptions( 


                if (subChunkType == FOURCC('f', 't', 'a', 'b'))

                {

                    if(subChunkSize < 8) {

                        return OK;

                    }



                    tmpData += 8;

                    size_t subChunkRemaining = subChunkSize - 8;