| commit | e0dcf097cc029d056926029a29419e1650cbdf1b | [log] [tgz] |
|---|---|---|
| author | Ray Essick <essick@google.com> | Thu Feb 23 16:08:09 2017 -0800 |
| committer | Ray Essick <essick@google.com> | Fri Mar 03 15:16:19 2017 -0800 |
| tree | 96813b9fd083c23fe62691ae8e879ee9a7471215 | |
| parent | 437d60bffb4217f997298a281d08c0d8fce7f562 [diff] |
Validate lengths in HEVC metadata parsing Add code to validate the size parameter passed to HecvParameterSets::addNalUnit(). Previously vulnerable to decrementing an unsigned past 0, yielding a huge result value. Bug: 35467107 Test: ran POC, no crash, emitted new "bad length" log entry Change-Id: Ia169b9edc1e0f7c5302e3c68aa90a54e8863d79e