commit | 6e7e30d4608c02a8869a71a3833f186dddc12896 | [log] [tgz] |
---|---|---|
author | Joshua J. Drake <android-open-source@qoop.org> | Mon May 04 17:14:11 2015 -0500 |
committer | The Android Automerger <android-build@android.com> | Mon Jul 27 12:36:53 2015 -0700 |
tree | cc62d67d586327578eae760574d93ccab2377a46 | |
parent | b9f68d996551c8fff3824cfa745fe93fc4e62963 [diff] |
Fix integer underflow in covr MPEG4 processing When the 'chunk_data_size' variable is less than 'kSkipBytesOfDataBox', an integer underflow can occur. This causes an extraordinarily large value to be passed to MetaData::setData, leading to a buffer overflow. Bug: 20923261 Change-Id: Icd28f63594ad941eabb3a12c750a4a2d5d2bf94b