Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit fa5c6c97 authored by Andy Hung's avatar Andy Hung
Browse files

EffectBundle: Check value size for get preset name 

Test: CTS testAllEffectsEqualizer_CVE_2017_0401
Bug: 37536407
Change-Id: I347af04677fc49a01efb549f06ff81d1a00dc4d0
parent 5136b743

media/libeffects/lvm/wrapper/Bundle/EffectBundle.cpp

+7 −0
Original line number Diff line number Diff line
@@ -2143,6 +2143,13 @@ int Equalizer_getParameter(EffectContext *pContext, 
            }

            break;

        }



        if (*pValueSize < 1) {

            status = -EINVAL;

            android_errorWriteLog(0x534e4554, "37536407");

            break;

        }



        name = (char *)pValue;

        strncpy(name, EqualizerGetPresetName(param2), *pValueSize - 1);

        name[*pValueSize - 1] = 0;