tree 64cb625c05b75ca03f1b4bc01d304c122f2cd905
parent 3e0e9138165ee1c2da813cc422dea1085e9d5faa
author Ray Essick <essick@google.com> 1497897252 -0700
committer android-build-team Robot <android-build-team-robot@google.com> 1502231024 +0000

Check frame handle validity before freeing buffer.

in CameraSource::releaseRecordingFrame(), validate the
VideoNativeHandleMetadata field when received. Avoid releasing
invalid handles (and thus invalid memory) if this has been
corrupted in user space.

Bug: 37662122
Test: poc before/after on nyc-mr2
(cherry picked from commit 7eb18466d9ee817ae1087ddc895902e8eae05535)

Change-Id: Icd84fb5bfb08e0a6379ed4ef3515019039390140