tag | ea4be346b05a9b4bca902ab5f4101df09934a05f | |
---|---|---|
tagger | The Android Open Source Project <initial-contribution@android.com> | Mon Aug 10 16:11:14 2015 -0700 |
object | f7f3306f52b9f5ff530f1da2028fbff872629e70 |
Android 5.1.1 release 12
commit | f7f3306f52b9f5ff530f1da2028fbff872629e70 | [log] [tgz] |
---|---|---|
author | Joshua J. Drake <android-open-source@qoop.org> | Mon May 04 17:57:24 2015 -0500 |
committer | The Android Automerger <android-build@android.com> | Tue Jul 28 12:49:54 2015 -0700 |
tree | 9ea6a70a66f1b3602575843c1b83b272d3d293f2 | |
parent | e5f7ef6ef987fc371d77caa909873e6385c91aa7 [diff] |
Prevent integer underflow if size is below 6 When processing 3GPP metadata, a subtraction operation may underflow and lead to a rather large linear byteswap operation in the subsequent framedata decoding code. Bound the 'size' value to prevent this from occurring. Bug: 20923261 Change-Id: I35dfbc8878c6b65cfe8b8adb7351a77ad4d604e5 (cherry picked from commit 9458e715d391ee8fe455fc31f07ff35ce12e0531)