OSDN Git Service

Fix integer underflow in covr MPEG4 processing
authorJoshua J. Drake <android-open-source@qoop.org>
Mon, 4 May 2015 22:14:11 +0000 (17:14 -0500)
committerNick Kralevich <nnk@google.com>
Tue, 4 Aug 2015 20:58:23 +0000 (13:58 -0700)
commitc87faed60483afb2466e03892bda80b72e5822c7
treeace05d3b571e33ebb187497647db39c797f8c62c
parentf1ce97ddc2f82d844a6fb8341585eb7b2e655f44
Fix integer underflow in covr MPEG4 processing

When the 'chunk_data_size' variable is less than 'kSkipBytesOfDataBox', an
integer underflow can occur. This causes an extraordinarily large value to
be passed to MetaData::setData, leading to a buffer overflow.

Bug: 20923261
(cherry picked from commit 4a492bf2ac47b9844d2527e1fcdf0064c3d8d52e)

Change-Id: I83490cbaf5b368073fcd8668a9241dfc90bebd90
media/libstagefright/MPEG4Extractor.cpp