commit 560a1589720463d2311b753f2f0f901c1097cedf
author Chris Craik <ccraik@google.com> Thu Jan 12 22:00:25 2017 +0000
committer android-build-merger <android-build-merger@google.com> Thu Jan 12 22:00:25 2017 +0000
tree 2a5e19bbd3aee9255e758ac0ecb779328ffd9e14
parent 0b33dbff239b2ed7c6f5472151b9255012d478f4
parent d3a5ff7bfeb361e8d2e808a2c8c5b864a181d5f7

resolve merge conflicts of 89cdd4cb to mnc-dev am: d2fd12358d am: 684a68075e am: bf0a8eefb0 am: 51e1a563a3 am: 8906021aec am: 7901c75979 am: 200bf8583d
am: d3a5ff7bfe

Change-Id: Ib3be3c1f13a44774517db8ac72cb79c56f580579

framesequence/jni/FrameSequence_webp.cpp

diff --git a/framesequence/jni/FrameSequence_webp.cpp b/framesequence/jni/FrameSequence_webp.cpp
index 18568da..f1bae82 100644
--- a/framesequence/jni/FrameSequence_webp.cpp
+++ b/framesequence/jni/FrameSequence_webp.cpp
@@ -105,6 +105,10 @@
             return;
         }
         mData.size = CHUNK_HEADER_SIZE + readSize;
+        if(mData.size < RIFF_HEADER_SIZE) {
+            ALOGE("WebP file malformed");
+            return;
+        }
         mData.bytes = new uint8_t[mData.size];
         memcpy((void*)mData.bytes, riff_header, RIFF_HEADER_SIZE);