OSDN Git Service

Camera metadata: Check source metadata size
authorEmilian Peev <epeev@google.com>
Mon, 6 Nov 2017 10:41:19 +0000 (10:41 +0000)
committerandroid-build-team Robot <android-build-team-robot@google.com>
Tue, 28 Nov 2017 03:33:29 +0000 (03:33 +0000)
commite770e378dc8e2320679272234285456ca2244a62
treeeba582dc8d09a29d1ad5b7163b243a6eeff26f2d
parent34893ec78fce2961bccaee6f81448c2fcfb7811d
Camera metadata: Check source metadata size

Source size passed by client could be smaller than 'camera_metadata_t'.
In this case the cast in 'allocate_copy_camera_metadata_checked()' will
be incorrect and we will try to access invalid heap memory.

Bug: 67782345
Test: Camera CTS
Change-Id: I9582c704f414493978d09ffb603b5e8368cda5ce
(cherry picked from commit 489bbd13bf0add8029444b9d9505b3d118776ea3)
camera/src/camera_metadata.c