commit 6122f9985770efc0d28af85c15de1320a5cb6b2f
author Mikhail Naganov <mnaganov@google.com> Tue Oct 24 14:44:43 2017 -0700
committer Nikoli Cartagena <dargeren@google.com> Tue Nov 28 21:27:22 2017 -0800
tree d540a8d0728295f94ae10a8944be2d4e891df670
parent 50b9c47a2607b1b50e6687af917e8eaf21016e3f

Add EFFECT_CMD_SET_PARAM parameter checking to Preset Reverb

Bug: 67647856
Test: Added CTS tests
Change-Id: I027ce8f7a1cdb8406ca423aaae7c45b6b76617f0
(cherry picked from commit ee804dfa15cc2d34e5d67a9b437cd023349d633b)

media/libeffects/lvm/wrapper/Reverb/EffectReverb.cpp

diff --git a/media/libeffects/lvm/wrapper/Reverb/EffectReverb.cpp b/media/libeffects/lvm/wrapper/Reverb/EffectReverb.cpp
index ee9406d..3d8e982 100644
--- a/media/libeffects/lvm/wrapper/Reverb/EffectReverb.cpp
+++ b/media/libeffects/lvm/wrapper/Reverb/EffectReverb.cpp
@@ -1889,6 +1889,10 @@
         if (param != REVERB_PARAM_PRESET) {
             return -EINVAL;
         }
+        if (vsize < (int)sizeof(uint16_t)) {
+            android_errorWriteLog(0x534e4554, "67647856");
+            return -EINVAL;
+        }
 
         uint16_t preset = *(uint16_t *)pValue;
         ALOGV("set REVERB_PARAM_PRESET, preset %d", preset);