commit 57bed83a539535bb64a33722fb67231119cb0618
author Andy Hung <hunga@google.com> Wed Aug 26 16:34:33 2015 -0700
committer Andy Hung <hunga@google.com> Thu Aug 27 00:06:18 2015 +0000
tree d27a064540c9761fd8c2c5f804232596f07e8bae
parent 9a2be5d49d57b239bf6345f033eab01ba98f3889

libmedia: clear reply data for IEffect command

Bug: 23540907
Change-Id: Ib89afc6b273b0eb310bbc5a1bd92b1e3d407c249

media/libmedia/IEffect.cpp

diff --git a/media/libmedia/IEffect.cpp b/media/libmedia/IEffect.cpp
index a303a8f..86c706a 100644
--- a/media/libmedia/IEffect.cpp
+++ b/media/libmedia/IEffect.cpp
@@ -151,14 +151,14 @@
             uint32_t cmdSize = data.readInt32();
             char *cmd = NULL;
             if (cmdSize) {
-                cmd = (char *)malloc(cmdSize);
+                cmd = (char *)calloc(cmdSize, 1);
                 data.read(cmd, cmdSize);
             }
             uint32_t replySize = data.readInt32();
             uint32_t replySz = replySize;
             char *resp = NULL;
             if (replySize) {
-                resp = (char *)malloc(replySize);
+                resp = (char *)calloc(replySize, 1);
             }
             status_t status = command(cmdCode, cmdSize, cmd, &replySz, resp);
             reply->writeInt32(status);