SnapdragonCamera: Correct AutoHDR callback data size check
Currently the AutoHDR functionality which handles
metadata callbacks always assumes that the length
of the callback data buffer will be equal to 12
bytes. It will always try to read and convert 3
32-bit integers. The check before this processing
is incorrect as it allows buffers which are less
than 12 bytes to be processed as well. This can
lead to array out of bounds exceptions, which are
also possible during FD snapshot metadata
callbacks that don't contain any faces. In this
particular scenario the metadata callback buffer
size will be 8 bytes.
Change-Id: I4094aaa56aa4135d2d806861353d49c8d7f9985c
CRs-Fixed: 799110
1 file changed