commit | dae006d1def007dddad9a202a0593b478eab503f | [log] [tgz] |
---|---|---|
author | Evgenii Stepanov <eugenis@google.com> | Tue Jul 07 16:16:25 2015 -0700 |
committer | Evgenii Stepanov <eugenis@google.com> | Tue Jul 07 16:16:25 2015 -0700 |
tree | b28f813ce8d2a792aead9237e598fa1600c280f9 | |
parent | 37009e46e5e935849384819d5db3e8b83d554947 [diff] |
Fix global-buffer-overflow in voAWB_Copy. Copy() in frameworks/av/media/libstagefright/codecs/amrwbenc/src/util.c always overreads the buffer by 4 bytes to the right, which, if we are very unlucky, can even hit an unmapped memory page (in this case it is just a global variable). Bug: 22331081 Change-Id: I3d5d7f94c7248967518bf4d0faf34c364e431135