diff options
author | rago <rago@google.com> | 2016-11-30 20:00:25 +0000 |
---|---|---|
committer | android-build-merger <android-build-merger@google.com> | 2016-11-30 20:00:25 +0000 |
commit | 3110aeafeb0c07f43b281fda0d6c006b3491cda2 (patch) | |
tree | b157c7670133a5a387df9576e6c840b5ce48c58f | |
parent | 2537c546f3c459e8e3b2fb422ae242fc868297fc (diff) | |
parent | 21c9c6dc690bc22da6c07d6240810ff6c17120d9 (diff) | |
download | libhardware-3110aeafeb0c07f43b281fda0d6c006b3491cda2.tar.gz |
Fix security vulnerability: potential OOB write in audioserver am: 3f9a6d3bd9 am: 28d8817df3 am: 750a6a4ed8 am: 559dbde531 am: 4654f9ab8b am: 4154f08e79 am: 2ebeab8c6b am: c196433170 am: cd6ebe9b27
am: 21c9c6dc69
Change-Id: I199ff9b65f50ab98676c4e449fa7cfc1ebb8ec85
-rw-r--r-- | include/hardware/audio_effect.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/include/hardware/audio_effect.h b/include/hardware/audio_effect.h index 41cd2e61..854f0c15 100644 --- a/include/hardware/audio_effect.h +++ b/include/hardware/audio_effect.h @@ -896,6 +896,9 @@ typedef struct effect_param_s { char data[]; // Start of Parameter + Value data } effect_param_t; +// Maximum effect_param_t size +#define EFFECT_PARAM_SIZE_MAX 65536 + // structure used by EFFECT_CMD_OFFLOAD command typedef struct effect_offload_param_s { bool isOffload; // true if the playback thread the effect is attached to is offloaded |