tree de4b3adc9d7e35fd4473c8dc564e8b260cacae3f
parent f4a88c8ed4f8186b3d6e2852993e063fc33ff231
author Joshua J. Drake <android-open-source@qoop.org> 1430782148 -0500
committer The Android Automerger <android-build@android.com> 1436476070 -0700

Fix integer overflow when handling MPEG4 tx3g atom

When the sum of the 'size' and 'chunk_size' variables is larger than 2^32,
an integer overflow occurs. Using the result value to allocate memory
leads to an undersized buffer allocation and later a potentially
exploitable heap corruption condition. Ensure that integer overflow does
not occur.

Bug: 20923261
Change-Id: Id050a36b33196864bdd98b5ea24241f95a0b5d1f