tree 46e1a76e378c9f2bd444d36bc4c8e5255f59a38d
parent fac7ba8dde3f38e377206ddce0cdba00dce24745
author Jean-Michel Trivi <jmtrivi@google.com> 1536619819 -0700
committer Rohit Yengisetty <rngy@google.com> 1539732075 -0700

Prevent out of bounds accesses in lppTransposer()

Check validity of pSettings->noOfPatches to prevent out of bounds
  access in lppTransposer(), which can also cause memSize to be
  negative.

Bug: 112160868
Test: see poc in bug
Change-Id: I789030b116da7f8ea261001b43ef6c677dd58a3d
Merged-In: I6a2161865d9cb9b51dc37c09d6e3a4a8e5d11f86
(cherry picked from commit 56ef80d7fec1fd9e201262348a96b8660558105a)