commit | 27364ee0ba32433833657a287aa663d51faa618e | [log] [tgz] |
---|---|---|
author | Jean-Michel Trivi <jmtrivi@google.com> | Tue Oct 24 17:39:19 2017 -0700 |
committer | Nikoli Cartagena <dargeren@google.com> | Tue Nov 28 21:53:22 2017 -0800 |
tree | 726c22775432ec516d0aafb34533746f439acbd8 | |
parent | 21681662e6936d0f7c657d4ac879a9e59ccb9239 [diff] |
DO NOT MERGE Prevent out of bound memory access in GetInvInt In GetInvInt(int) function, malicious content can access memory outside of the invCount array. Always bound access to valid indices. Test: see bug for malicious content, decoded with "stagefright -s -a" Bug: 65025048 Change-Id: I92d4a14519f45d5a329d7f69f21f2aef0a8c6daa (cherry picked from commit 9fb4261c43a2d15f3b77a7e56470ed6784f83d04)