tag 007f169691be6851be33c6d6272dae6a5ca08ba7
tagger The Android Open Source Project <initial-contribution@android.com> Thu Jun 22 11:11:15 2017 -0700
object adeb10d71234fbd160dfb53cc00fdc43f6464358

Android Wear 7.1.1 Release 0.29

commit adeb10d71234fbd160dfb53cc00fdc43f6464358
author Robb Glasser <rglasser@google.com> Wed Apr 12 14:41:58 2017 +0200
committer jenkins_ndg <jenkins_ndg@intel.com> Tue May 02 01:40:37 2017 -0700
tree 8f11d4d152a31be247e8a6cd13d265691059f3d5
parent ab405c69e9deb7761205b66e9db4ae8768412c69

Prevent heap overflow in uvc driver

The size of uvc_control_mapping is user controlled leading to a
potential heap overflow in the uvc driver. This adds a check to verify
the user provided size fits within the bounds of the defined buffer
size.

Bug: 33300353
Change-Id: If29c1b396633b6137966a12e38f6fd1841b045bd
Tracked-On: https://jira01.devtools.intel.com/browse/AW-5094
Signed-off-by: Robb Glasser <rglasser@google.com>
Reviewed-on: https://android.intel.com/577969
Reviewed-by: Louis, FabienX <fabienx.louis@intel.com>
Tested-by: Louis, FabienX <fabienx.louis@intel.com>
Reviewed-by: Dubray, SimonX <simonx.dubray@intel.com>
Reviewed-by: Tasayco Loarte, VictorX <victorx.tasayco.loarte@intel.com>