diff options
| author | rago <rago@google.com> | 2016-11-29 10:29:39 -0800 |
|---|---|---|
| committer | gitbuildkicker <android-build@google.com> | 2016-12-15 16:32:32 -0800 |
| commit | 2008c9cfc04a8df680fc94b37a912c4830672283 (patch) | |
| tree | b157c7670133a5a387df9576e6c840b5ce48c58f | |
| parent | 6b2fac2e18f124f039fd3138452407d87386b65f (diff) | |
| download | libhardware-nougat-mr0.5-release.tar.gz | |
Fix security vulnerability: potential OOB write in audioserverandroid-7.0.0_r36android-7.0.0_r35android-7.0.0_r34android-7.0.0_r33android-7.0.0_r32android-7.0.0_r31android-7.0.0_r30android-7.0.0_r29nougat-mr0.5-release
Bug: 32705438
Bug: 32703959
Test: cts security test
Change-Id: I920a74cb0a809c623ddf802f3d2808f0f1bd537c
(cherry picked from commit 3f9a6d3bd97966999fa35b9423b8c0042c8198b3)
| -rw-r--r-- | include/hardware/audio_effect.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/include/hardware/audio_effect.h b/include/hardware/audio_effect.h index 41cd2e61..854f0c15 100644 --- a/include/hardware/audio_effect.h +++ b/include/hardware/audio_effect.h @@ -896,6 +896,9 @@ typedef struct effect_param_s { char data[]; // Start of Parameter + Value data } effect_param_t; +// Maximum effect_param_t size +#define EFFECT_PARAM_SIZE_MAX 65536 + // structure used by EFFECT_CMD_OFFLOAD command typedef struct effect_offload_param_s { bool isOffload; // true if the playback thread the effect is attached to is offloaded |