commit | 523f6b49c1a2289161f40cf9fe80b92e592e9441 | [log] [tgz] |
---|---|---|
author | Ray Essick <essick@google.com> | Thu Feb 23 16:08:09 2017 -0800 |
committer | gitbuildkicker <android-build@google.com> | Wed Mar 22 14:59:46 2017 -0700 |
tree | bde8ec5825a0b4a5ee9509336a877bdeb6a0ee52 | |
parent | a9188f89179a7edd301abaf37d644adf5d647a04 [diff] |
Validate lengths in HEVC metadata parsing Add code to validate the size parameter passed to HecvParameterSets::addNalUnit(). Previously vulnerable to decrementing an unsigned past 0, yielding a huge result value. Bug: 35467107 Test: ran POC, no crash, emitted new "bad length" log entry Change-Id: Ia169b9edc1e0f7c5302e3c68aa90a54e8863d79e (cherry picked from commit e0dcf097cc029d056926029a29419e1650cbdf1b)