summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorrago <rago@google.com>2016-11-30 20:05:25 +0000
committerandroid-build-merger <android-build-merger@google.com>2016-11-30 20:05:25 +0000
commitc5ced573193573d8fe29903886345d0f2ce40ab6 (patch)
treee8ddf6bba3b5c9a035892ca5c7edbe9b56b624f7
parent890a976bb97086501c6e5d88b38389b1f53a6394 (diff)
parent3110aeafeb0c07f43b281fda0d6c006b3491cda2 (diff)
downloadlibhardware-c5ced573193573d8fe29903886345d0f2ce40ab6.tar.gz
Fix security vulnerability: potential OOB write in audioserver am: 3f9a6d3bd9 am: 28d8817df3 am: 750a6a4ed8 am: 559dbde531 am: 4654f9ab8b am: 4154f08e79 am: 2ebeab8c6b am: c196433170 am: cd6ebe9b27 am: 21c9c6dc69
am: 3110aeafeb Change-Id: I5f6830b3d713fa9836065ef4101317f4d17488c2
-rw-r--r--include/hardware/audio_effect.h3
1 files changed, 3 insertions, 0 deletions
diff --git a/include/hardware/audio_effect.h b/include/hardware/audio_effect.h
index 41cd2e61..854f0c15 100644
--- a/include/hardware/audio_effect.h
+++ b/include/hardware/audio_effect.h
@@ -896,6 +896,9 @@ typedef struct effect_param_s {
char data[]; // Start of Parameter + Value data
} effect_param_t;
+// Maximum effect_param_t size
+#define EFFECT_PARAM_SIZE_MAX 65536
+
// structure used by EFFECT_CMD_OFFLOAD command
typedef struct effect_offload_param_s {
bool isOffload; // true if the playback thread the effect is attached to is offloaded