Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit da329991 authored by Joshua J. Drake's avatar Joshua J. Drake Committed by Gerrit Code Review
Browse files

Fix integer overflow when handling MPEG4 tx3g atom

When the sum of the 'size' and 'chunk_size' variables is larger than 2^32,
an integer overflow occurs. Using the result value to allocate memory
leads to an undersized buffer allocation and later a potentially
exploitable heap corruption condition. Ensure that integer overflow does
not occur.

Change-Id: Id050a36b33196864bdd98b5ea24241f95a0b5d1f
(cherry picked from commit 889ae4ad)
parent c774f164
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment