Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 1d3612f1 authored by Mathias Agopian's avatar Mathias Agopian Committed by Android Git Automerger
Browse files

am 2a8c49eb: fix an out-of-bounds memory access 

* commit '2a8c49eb':
  fix an out-of-bounds memory access
parents f9730c3b 2a8c49eb

libs/gui/BufferQueue.cpp

+6 −4
Original line number Original line Diff line number Diff line
@@ -314,13 +314,15 @@ status_t BufferQueue::dequeueBuffer(int *outBuf, sp<Fence>& outFence, 
                     * the consumer may still have pending reads of the

                     * the consumer may still have pending reads of the

                     * buffers in flight.

                     * buffers in flight.

                     */

                     */

                    if (found >= 0) {

                        bool isOlder = mSlots[i].mFrameNumber <

                        bool isOlder = mSlots[i].mFrameNumber <

                                mSlots[found].mFrameNumber;

                                mSlots[found].mFrameNumber;

                    if (found < 0 || isOlder) {

                        if (isOlder) {

                            found = i;

                            found = i;

                        }

                        }

                    }

                    }

                }

                }

            }





            // clients are not allowed to dequeue more than one buffer

            // clients are not allowed to dequeue more than one buffer

            // if they didn't set a buffer count.

            // if they didn't set a buffer count.