tag de5b61b4e784048f37d3d713feaffd35ba5e76de
tagger The Android Open Source Project <initial-contribution@android.com> Wed Sep 08 13:27:31 2021 -0700
object e2bba7fcb7aed6e88acd80b48ba5ea9f3902cef4

Android security 9.0.0 release 72

commit e2bba7fcb7aed6e88acd80b48ba5ea9f3902cef4
author Phil Burk <philburk@google.com> Tue Mar 03 12:51:15 2020 -0800
committer Anis Assi <anisassi@google.com> Thu Oct 08 17:09:08 2020 -0700
tree 4b06da9cced0cd3c171dbf1a42126d634bc7f0e7
parent ba90150f439f16e1717bc8972468328da4ffac76

spdif: fix possible buffer overflow

SPDIF burst buffer could overflow if given bad data.
Check for frmsiz in header being too low.
Prevent numeric overflow in pending bytes calculation.
Prevent numeric overflow when checking for buffer overflow.

Bug: 145262423
Bug: 160265164
Test: tests/spdif_tests.cpp
Change-Id: Ifc7f8c8946388e19f39f35d649a5936568f8b9b2
Merged-In: Ifc7f8c8946388e19f39f35d649a5936568f8b9b2
(cherry picked from commit 1f73a728ef4b6d7d350c0715bdb10d59e5b5f9be)
(cherry picked from commit b2fe1bc25ccb3d8032252d875e6d81e52b1fcfb7)