| commit | c79a98551f7271c9c592a24a692d9d05169aa743 | [log] [tgz] |
|---|---|---|
| author | Praveen Chavan <pchavan@codeaurora.org> | Mon Apr 11 17:32:55 2016 -0700 |
| committer | The Android Automerger <android-build@google.com> | Mon Apr 25 13:03:20 2016 -0700 |
| tree | e382779616cd3781d15299250298da192b22cb21 | |
| parent | d0d07e8b2488cb3fd756c0ec234e28301a847548 [diff] |
DO NOT MERGE mm-video-v4l2: venc: add safety checks for freeing buffers Allow only up to 64 buffers on input/output port (since the allocation bitmap is only 64-wide). Add safety checks to free only as many buffers were allocated. Fixes: Heap Overflow and Possible Local Privilege Escalation in MediaServer (libOmxVenc problem) Bug: 27532497 Change-Id: I31e576ef9dc542df73aa6b0ea113d72724b50fc6 (cherry picked from commit a3169f86efc63cd9d4eb28e4550444bd4a56bd21)