| commit | 0a279c25db5d4539ef731e4f3b9d772b71d3dc46 | [log] [tgz] |
|---|---|---|
| author | Joshua J. Drake <android-open-source@qoop.org> | Wed Apr 08 23:53:10 2015 -0500 |
| committer | Jon Larimer <jlarimer@google.com> | Fri Jul 31 15:18:52 2015 -0400 |
| tree | 3bb7a28c7026f03375fd9339cfbf1a473123eff1 | |
| parent | 44276537919e5ecae6ef879c093ff50aae36336f [diff] |
Fix integer underflow in ESDS processing Several arithmetic operations within parseESDescriptor could underflow, leading to an out-of-bounds read operation. Ensure that subtractions from 'size' do not cause it to wrap around. Bug: 20139950 Change-Id: I0d1b136ce68fd7c6f606ce66714bf644cfb2961c