diff options
| author | rago <rago@google.com> | 2016-11-30 19:34:22 +0000 |
|---|---|---|
| committer | android-build-merger <android-build-merger@google.com> | 2016-11-30 19:34:22 +0000 |
| commit | 4154f08e796e2d073307a736917730f618b6e9e5 (patch) | |
| tree | 3796021a7f14feead0b58601daaa01c5851b6842 | |
| parent | 4137555a77c5fd68eedbf63a0a351599edcbbcac (diff) | |
| parent | 4654f9ab8bedb3d6a4b3678592fe884487fb89b4 (diff) | |
| download | libhardware-4154f08e796e2d073307a736917730f618b6e9e5.tar.gz | |
Fix security vulnerability: potential OOB write in audioserver am: 3f9a6d3bd9 am: 28d8817df3 am: 750a6a4ed8 am: 559dbde531
am: 4654f9ab8b
Change-Id: I6b12abacd19b3ac06c054d05c5f381d234756593
| -rw-r--r-- | include/hardware/audio_effect.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/include/hardware/audio_effect.h b/include/hardware/audio_effect.h index ee48e4ca..bd9a5b73 100644 --- a/include/hardware/audio_effect.h +++ b/include/hardware/audio_effect.h @@ -895,6 +895,9 @@ typedef struct effect_param_s { char data[]; // Start of Parameter + Value data } effect_param_t; +// Maximum effect_param_t size +#define EFFECT_PARAM_SIZE_MAX 65536 + // structure used by EFFECT_CMD_OFFLOAD command typedef struct effect_offload_param_s { bool isOffload; // true if the playback thread the effect is attached to is offloaded |