tree cc62d67d586327578eae760574d93ccab2377a46
parent 3cb1b6944e776863aea316e25fdc16d7f9962902
author Joshua J. Drake <android-open-source@qoop.org> 1430777651 -0500
committer The Android Automerger <android-build@google.com> 1436475780 -0700

Fix integer underflow in covr MPEG4 processing

When the 'chunk_data_size' variable is less than 'kSkipBytesOfDataBox', an
integer underflow can occur. This causes an extraordinarily large value to
be passed to MetaData::setData, leading to a buffer overflow.

Bug: 20923261
Change-Id: Icd28f63594ad941eabb3a12c750a4a2d5d2bf94b