| commit | 5e751957ba692658b7f67eb03ae5ddb2cd3d970c | [log] [tgz] |
|---|---|---|
| author | Joshua J. Drake <android-open-source@qoop.org> | Wed Apr 08 23:53:10 2015 -0500 |
| committer | The Android Automerger <android-build@google.com> | Thu Jul 09 14:02:59 2015 -0700 |
| tree | d922546ec223bf6442467c9ef9efc6fc7d5646bc | |
| parent | 2434839bbd168469f80dd9a22f1328bc81046398 [diff] |
Fix integer underflow in ESDS processing Several arithmetic operations within parseESDescriptor could underflow, leading to an out-of-bounds read operation. Ensure that subtractions from 'size' do not cause it to wrap around. Bug: 20139950 (cherry picked from commit 07c0f59d6c48874982d2b5c713487612e5af465a) Change-Id: I377d21051e07ca654ea1f7037120429d3f71924a