| commit | be7b5e253f85132683826f305e5dcdaf83f0b300 | [log] [tgz] |
|---|---|---|
| author | Joshua J. Drake <android-open-source@qoop.org> | Sat Aug 15 08:31:32 2015 -0500 |
| committer | Robert Shih <robertshih@google.com> | Wed Aug 19 15:25:41 2015 -0700 |
| tree | 968e815c93164680facb232af648fcdad481258e | |
| parent | e1d095fa8bbb0d944722ce93d54962d1efb84a6f [diff] |
Prevent integer underflows in ID3::Iterator If mFrameSize is less than or equal to getHeaderLength(), an integer underflow will occur. This typically leads to a crash reading out of bounds in the following code. Prevent this from happening by validating mFrameSize. Also add NULL checks after references to ID3::Iterator::getData. Bug: 23285887 Change-Id: I35eeda3c5349ebbd9ffb3ea49b79af6a940d1395