| commit | 1f0f83e1fff1e329c5f89727747103b811c913b1 | [log] [tgz] |
|---|---|---|
| author | TreeHugger Robot <treehugger-gerrit@google.com> | Wed Jun 07 00:57:49 2017 +0000 |
| committer | Android (Google) Code Review <android-gerrit@google.com> | Wed Jun 07 00:57:50 2017 +0000 |
| tree | c85475452faf1823ae8fa005ecac60ef358fa66a | |
| parent | 8cf151a63177247a370ecdef6f2e1ec0b80901d5 [diff] | |
| parent | 617cd5c7f46c2312c7253001c46e7eea4c0315e0 [diff] |
Merge "Fix security vulnerability: Equalizer setParameter memory overflow" into lmp-dev
diff --git a/post_proc/equalizer.c b/post_proc/equalizer.c index 8c9449a..4e4552f 100644 --- a/post_proc/equalizer.c +++ b/post_proc/equalizer.c
@@ -334,6 +334,13 @@ } break; } + + if (p->vsize < 1) { + p->status = -EINVAL; + android_errorWriteLog(0x534e4554, "37536407"); + break; + } + name = (char *)value; strlcpy(name, equalizer_get_preset_name(eq_ctxt, param2), p->vsize - 1); name[p->vsize - 1] = 0;