commit | c95878a315cde788234108c7336415e1d46c8ebb | [log] [tgz] |
---|---|---|
author | Ray Essick <essick@google.com> | Thu Feb 23 16:08:09 2017 -0800 |
committer | gitbuildkicker <android-build@google.com> | Thu Mar 23 16:07:38 2017 -0700 |
tree | 83968014afba15d6dc46a3cb5934f5fab4e031a4 | |
parent | d370c153739fcd1d8d256b6cb87b2210647d90e2 [diff] |
Validate lengths in HEVC metadata parsing Add code to validate the size parameter passed to HecvParameterSets::addNalUnit(). Previously vulnerable to decrementing an unsigned past 0, yielding a huge result value. Bug: 35467107 Test: ran POC, no crash, emitted new "bad length" log entry Change-Id: Ia169b9edc1e0f7c5302e3c68aa90a54e8863d79e (cherry picked from commit e0dcf097cc029d056926029a29419e1650cbdf1b)