commit | 3468e22a1f30473d3ea3968220cdc8be8c462f90 | [log] [tgz] |
---|---|---|
author | Ray Essick <essick@google.com> | Thu Feb 23 16:08:09 2017 -0800 |
committer | android-build-team Robot <android-build-team-robot@google.com> | Wed Aug 23 19:13:50 2017 +0000 |
tree | b23c83a51e4a8bd1a6da20ec512cc4f3bca14c8a | |
parent | d6e03aaf1563781f2478ca9ae0ce141797a622b4 [diff] |
Validate lengths in HEVC metadata parsing Add code to validate the size parameter passed to HecvParameterSets::addNalUnit(). Previously vulnerable to decrementing an unsigned past 0, yielding a huge result value. Bug: 35467107 Test: ran POC, no crash, emitted new "bad length" log entry Change-Id: Ia169b9edc1e0f7c5302e3c68aa90a54e8863d79e (cherry picked from commit e0dcf097cc029d056926029a29419e1650cbdf1b)