commit 2a4ae300e5bbe1d76e35606862fb4ebafd5dfaff
author Venkat Thogaru <vthogaru@codeaurora.org> Mon Jul 27 18:46:14 2020 +0530
committer Gerrit - the friendly Code Review server <code-review@localhost> Mon Aug 10 00:37:08 2020 -0700
tree 1bff0c13de324f4b9823646bc619a69be777fca0
parent 00b71c2184427165f1f23a38a6fd5f6c2458f7ed

gralloc: Fix array out of bound

Change-Id: I56aa8742a90d50c843707143566751ecdb7ff6ae

gralloc/gr_buf_mgr.cpp

diff --git a/gralloc/gr_buf_mgr.cpp b/gralloc/gr_buf_mgr.cpp
index f0b4639..64f36e1 100644
--- a/gralloc/gr_buf_mgr.cpp
+++ b/gralloc/gr_buf_mgr.cpp
@@ -1356,7 +1356,7 @@
   // Reset to false for special cases below
   if (IS_VENDOR_METADATA_TYPE(metadatatype_value)) {
     metadata->isVendorMetadataSet[GET_VENDOR_METADATA_STATUS_INDEX(metadatatype_value)] = true;
-  } else {
+  } else if (GET_STANDARD_METADATA_STATUS_INDEX(metadatatype_value) < METADATA_SET_SIZE) {
     metadata->isStandardMetadataSet[GET_STANDARD_METADATA_STATUS_INDEX(metadatatype_value)] = true;
   }
 #endif
@@ -1533,7 +1533,7 @@
 #ifdef METADATA_V2
       if (IS_VENDOR_METADATA_TYPE(metadatatype_value)) {
         metadata->isVendorMetadataSet[GET_VENDOR_METADATA_STATUS_INDEX(metadatatype_value)] = false;
-      } else {
+      } else if (GET_STANDARD_METADATA_STATUS_INDEX(metadatatype_value) < METADATA_SET_SIZE) {
         metadata->isStandardMetadataSet[GET_STANDARD_METADATA_STATUS_INDEX(metadatatype_value)] =
             false;
       }