| commit | 07c0f59d6c48874982d2b5c713487612e5af465a | [log] [tgz] |
|---|---|---|
| author | Joshua J. Drake <android-open-source@qoop.org> | Wed Apr 08 23:53:10 2015 -0500 |
| committer | Nick Kralevich <nnk@google.com> | Thu Apr 09 17:34:17 2015 -0700 |
| tree | 2b2020300acb6954190a453080827ac252adcf46 | |
| parent | c24607c29c96f939aed9e33bfa702b1dd79da4b7 [diff] |
Fix integer underflow in ESDS processing Several arithmetic operations within parseESDescriptor could underflow, leading to an out-of-bounds read operation. Ensure that subtractions from 'size' do not cause it to wrap around. Bug: 20139950 Change-Id: I0d1b136ce68fd7c6f606ce66714bf644cfb2961c