commit | c7c9271740c29c02e7926265ed53a44b8113dbfb | [log] [tgz] |
---|---|---|
author | Ray Essick <essick@google.com> | Wed May 10 15:38:51 2017 -0700 |
committer | android-build-team Robot <android-build-team-robot@google.com> | Wed May 24 22:01:52 2017 +0000 |
tree | 1a662ade9bf04408dfd2fa73bfd4acc1feb6efd2 | |
parent | 1618337cac09284fddb5bb14b5e0cfe2946d3431 [diff] |
Prevent OOB write in soft_avc encoder Soft avc encoder cached buffer sizes across a point where the sizes could be reset by an app, allowing crafted requests to hit outside of the current buffer. This remedies that by forcing buffer reallocation with new sizes whenever the encoder state at such 'reset' points. Bug: 35421151 Test: run POC with no crash Change-Id: I8c689846142264f7b6a277332260a6bd8a2bd92d (cherry picked from commit 463452a94907278ca5e4c5632e50bbe59e861544)