Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e1562f08 authored by Dichen Zhang's avatar Dichen Zhang Committed by Automerger Merge Worker
Browse files

Merge "ultrahdr: fix input buffer access in tonemap" into udc-dev am: bb319326 am: de0a3610 

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/native/+/23288897



Change-Id: I71f25b4e5907cc779ea6194d8e66a1f7ffaae543
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents 1a6b6fca de0a3610

libs/ultrahdr/jpegr.cpp

+9 −12
Original line number Original line Diff line number Diff line
@@ -1041,21 +1041,18 @@ status_t JpegR::toneMap(jr_uncompressed_ptr src, jr_uncompressed_ptr dest) { 
    return ERROR_JPEGR_INVALID_NULL_PTR;

    return ERROR_JPEGR_INVALID_NULL_PTR;

  }

  }





  size_t src_luma_stride = src->luma_stride;

  size_t src_chroma_stride = src->chroma_stride;

  uint16_t* src_luma_data = reinterpret_cast<uint16_t*>(src->data);

  uint16_t* src_luma_data = reinterpret_cast<uint16_t*>(src->data);

  uint16_t* src_chroma_data = reinterpret_cast<uint16_t*>(src->chroma_data);

  size_t src_luma_stride = src->luma_stride == 0 ? src->width : src->luma_stride;





  if (src_chroma_data == nullptr) {

  uint16_t* src_chroma_data;

    src_chroma_data = &reinterpret_cast<uint16_t*>(src->data)[src_luma_stride * src->height];

  size_t src_chroma_stride;

  }

  if (src->chroma_data == nullptr) {

  if (src_luma_stride == 0) {

    src_luma_stride = src->width;

  }

  if (src_chroma_stride == 0) {

     src_chroma_stride = src_luma_stride;

     src_chroma_stride = src_luma_stride;

     src_chroma_data = &reinterpret_cast<uint16_t*>(src->data)[src_luma_stride * src->height];

  } else {

     src_chroma_stride = src->chroma_stride;

     src_chroma_data = reinterpret_cast<uint16_t*>(src->chroma_data);

  }

  }



  dest->width = src->width;

  dest->width = src->width;

  dest->height = src->height;

  dest->height = src->height;