diff options
author | rago <rago@google.com> | 2016-11-29 10:29:39 -0800 |
---|---|---|
committer | gitbuildkicker <android-build@google.com> | 2016-12-19 14:41:24 -0800 |
commit | 534098cb29e1e4151ba2ed83d6a911d0b6f48522 (patch) | |
tree | 753ffaa631a5cbc35b9b4935057418afea9faa84 | |
parent | edefe53f8b5ccc2339bec2d8fd9c7516aeb2d319 (diff) | |
download | libhardware-534098cb29e1e4151ba2ed83d6a911d0b6f48522.tar.gz |
Fix security vulnerability: potential OOB write in audioserverandroid-cts-7.1_r9android-cts-7.1_r8android-cts-7.1_r7android-cts-7.1_r6android-cts-7.1_r5android-cts-7.1_r4android-cts-7.1_r3android-cts-7.1_r29android-cts-7.1_r28android-cts-7.1_r27android-cts-7.1_r26android-cts-7.1_r25android-cts-7.1_r24android-cts-7.1_r23android-cts-7.1_r22android-cts-7.1_r21android-cts-7.1_r20android-cts-7.1_r19android-cts-7.1_r18android-cts-7.1_r17android-cts-7.1_r16android-cts-7.1_r15android-cts-7.1_r14android-cts-7.1_r13android-cts-7.1_r12android-cts-7.1_r11android-cts-7.1_r10android-7.1.1_r23android-7.1.1_r22nougat-mr1-releasenougat-mr1-cts-release
Bug: 32705438
Bug: 32703959
Test: cts security test
Change-Id: I920a74cb0a809c623ddf802f3d2808f0f1bd537c
(cherry picked from commit 3f9a6d3bd97966999fa35b9423b8c0042c8198b3)
-rw-r--r-- | include/hardware/audio_effect.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/include/hardware/audio_effect.h b/include/hardware/audio_effect.h index e49980d1..8a88414a 100644 --- a/include/hardware/audio_effect.h +++ b/include/hardware/audio_effect.h @@ -911,6 +911,9 @@ typedef struct effect_param_s { char data[]; // Start of Parameter + Value data } effect_param_t; +// Maximum effect_param_t size +#define EFFECT_PARAM_SIZE_MAX 65536 + // structure used by EFFECT_CMD_OFFLOAD command typedef struct effect_offload_param_s { bool isOffload; // true if the playback thread the effect is attached to is offloaded |