commit | 263f752fdef64e2ebca83be0d0234f240119db94 | [log] [tgz] |
---|---|---|
author | Emilian Peev <epeev@google.com> | Mon Nov 06 10:41:19 2017 +0000 |
committer | Nikoli Cartagena <dargeren@google.com> | Mon Nov 13 16:02:42 2017 -0800 |
tree | 00e4d3d01c5936da616da79a270b4b488d5cb8b0 | |
parent | ff3e6f401eb371bd51eaed91bfec1728ec22f3d1 [diff] |
Camera metadata: Check source metadata size Source size passed by client could be smaller than 'camera_metadata_t'. In this case the cast in 'allocate_copy_camera_metadata_checked()' will be incorrect and we will try to access invalid heap memory. Bug: 67782345 Test: Camera CTS Change-Id: I9582c704f414493978d09ffb603b5e8368cda5ce (cherry picked from commit 489bbd13bf0add8029444b9d9505b3d118776ea3)