| commit | 1552726c8a9a7579fcb00f7849d8a1d59e4f571c | [log] [tgz] |
|---|---|---|
| author | Ray Essick <essick@google.com> | Thu Feb 23 16:08:09 2017 -0800 |
| committer | gitbuildkicker <android-build@google.com> | Thu Mar 23 10:55:27 2017 -0700 |
| tree | 83968014afba15d6dc46a3cb5934f5fab4e031a4 | |
| parent | bb1408b3969ffb097e3bbdf241ccd84de6448bfb [diff] |
Validate lengths in HEVC metadata parsing Add code to validate the size parameter passed to HecvParameterSets::addNalUnit(). Previously vulnerable to decrementing an unsigned past 0, yielding a huge result value. Bug: 35467107 Test: ran POC, no crash, emitted new "bad length" log entry Change-Id: Ia169b9edc1e0f7c5302e3c68aa90a54e8863d79e (cherry picked from commit e0dcf097cc029d056926029a29419e1650cbdf1b)