tag | c303e72d2e3d9709f20fedb7dd433db291bfded2 | |
---|---|---|
tagger | The Android Open Source Project <initial-contribution@android.com> | Mon May 01 08:38:47 2017 -0700 |
object | 594bf934384920618d2b6ce0bcda1f60144cb3eb |
Android 7.1.2 release 8
commit | 594bf934384920618d2b6ce0bcda1f60144cb3eb | [log] [tgz] |
---|---|---|
author | Ray Essick <essick@google.com> | Mon Mar 13 11:59:57 2017 -0700 |
committer | gitbuildkicker <android-build@google.com> | Wed Mar 22 14:59:48 2017 -0700 |
tree | cb138bc2055101a16f9dc84a6d258cae35bf4cd1 | |
parent | 961e5ac5788b52304e64b9a509781beaf5201fb0 [diff] |
Add bounds check in SoftAACEncoder2::onQueueFilled() Original code blindly copied some header information into the user-supplied buffer without checking for sufficient space. The code does check when it gets to filling the data -- it's just the header copies that weren't checked. Bug: 34617444 Test: ran POC before/after Change-Id: I6e80ec90616f6cd02bb8316cd2d6e309b7e4729d (cherry picked from commit 6231243626b8b9c57593b1f0ee417f2c4af4c0aa)