tree 0efb7f2836286427f4d9e87fba96939a8dcbab82
parent 86e33f9cc341a607207a6856bcbfb5d20b96c473
author Joshua J. Drake <android-open-source@qoop.org> 1430782595 -0500
committer The Android Automerger <android-build@android.com> 1438112963 -0700

Prevent integer overflow when processing covr MPEG4 atoms

If the 'chunk_data_size' value is SIZE_MAX, an integer overflow will occur
and cause an undersized buffer to be allocated. The following processing
then overfills the resulting memory and creates a potentially exploitable
condition. Ensure that integer overflow does not occur.

Bug: 20923261
Change-Id: I75cce323aec04a612e5a230ecd7c2077ce06035f