| commit | 2dea71fab26b8e1c9c2bb2150b1969cea159e915 | [log] [tgz] |
|---|---|---|
| author | Emilian Peev <epeev@google.com> | Mon Nov 06 10:41:19 2017 +0000 |
| committer | android-build-team Robot <android-build-team-robot@google.com> | Wed Nov 29 18:11:09 2017 +0000 |
| tree | eba582dc8d09a29d1ad5b7163b243a6eeff26f2d | |
| parent | 8b539020d2826ce1a4805363a2c7bc1e530731b7 [diff] |
Camera metadata: Check source metadata size Source size passed by client could be smaller than 'camera_metadata_t'. In this case the cast in 'allocate_copy_camera_metadata_checked()' will be incorrect and we will try to access invalid heap memory. Bug: 67782345 Test: Camera CTS Change-Id: I9582c704f414493978d09ffb603b5e8368cda5ce (cherry picked from commit 489bbd13bf0add8029444b9d9505b3d118776ea3)