commit: d9977ef8294ac3f4932f5a6d2b186cb84c9e21a3
[log]
author: Vivek R Jadhav <jadhavvivek@google.com>
Tue May 05 10:26:37 2026 +0000
committer: Android Build Coastguard Worker <android-build-coastguard-worker@google.com>
Mon Jul 13 16:34:18 2026 -0700
tree: 65cbcb3e0e98bdd6427d38cc88b73b284e262394
parent: 3b1c4583c7b38af706164d23ab2a816e10ea1644 [diff]

libhevcdec: Fix heap buffer overflow in ihevcd_get_tu_data_size

ihevcd_get_tu_data_size() previously budgeted the tu_map using only
luma TUs (num_luma_tu), while the initialization logic consumes space
for both luma and chroma. This change updates the allocation to use
num_tu to properly size the buffer

Bug: 505000651
Test: poc in the bug
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:ffc26dcdf3206e23b11e0820066a6c83732adc25
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:ab676b9cfe96e396e8f77ee255ffb13da4d0d466
Merged-In: I8ff89026f66addf34b18dbedf9001db292db8fe9
Change-Id: I8ff89026f66addf34b18dbedf9001db292db8fe9

decoder/ihevcd_utils.c[diff]

1 file changed

tree: 65cbcb3e0e98bdd6427d38cc88b73b284e262394

README.md

LIBHEVC

Getting Started Document

LibHEVC build steps

Supports:

aarch32/aarch64 on Linux.
aarch32/aarch64 on Android.
x86_32/x86_64 on Linux.

Native Builds

Use the following commands for building on the target machine

$ cd external/libhevc
$ mkdir build
$ cd build
$ cmake ..
$ make

Cross-compiler based builds

Building for x86_32 on a x86_64 Linux machine

$ cd external/libhevc
$ mkdir build
$ cd build
$ CFLAGS="-m32" CXXFLAGS="-m32" LDFLAGS="-m32" cmake ..
$ make

Building for aarch32/aarch64

Update ‘CMAKE_C_COMPILER’, ‘CMAKE_CXX_COMPILER’, ‘CMAKE_C_COMPILER_AR’, and ‘CMAKE_CXX_COMPILER_AR’ in CMAKE_TOOLCHAIN_FILE passed below

$ cd external/libhevc
$ mkdir build
$ cd build

For aarch64

$ cmake .. -DCMAKE_TOOLCHAIN_FILE=../cmake/toolchains/aarch64_toolchain.cmake
$ make

For aarch32

$ cmake .. -DCMAKE_TOOLCHAIN_FILE=../cmake/toolchains/aarch32_toolchain.cmake
$ make