diff options
author | rago <rago@google.com> | 2016-11-30 19:23:23 +0000 |
---|---|---|
committer | android-build-merger <android-build-merger@google.com> | 2016-11-30 19:23:23 +0000 |
commit | 559dbde531da83059b9ed2a216edbb21f985ad8e (patch) | |
tree | 647c3a8500a88cdb814652b769a1509042b91339 | |
parent | 4e10135ef499073711944860ccf9a7c43b8bf6ac (diff) | |
parent | 750a6a4ed8765f1eadb8a8e92398b19b8788eaa6 (diff) | |
download | libhardware-559dbde531da83059b9ed2a216edbb21f985ad8e.tar.gz |
Fix security vulnerability: potential OOB write in audioserver am: 3f9a6d3bd9 am: 28d8817df3
am: 750a6a4ed8
Change-Id: I9254658ce47758df06c15c049d80862e7e774847
-rw-r--r-- | include/hardware/audio_effect.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/include/hardware/audio_effect.h b/include/hardware/audio_effect.h index ee48e4ca..bd9a5b73 100644 --- a/include/hardware/audio_effect.h +++ b/include/hardware/audio_effect.h @@ -895,6 +895,9 @@ typedef struct effect_param_s { char data[]; // Start of Parameter + Value data } effect_param_t; +// Maximum effect_param_t size +#define EFFECT_PARAM_SIZE_MAX 65536 + // structure used by EFFECT_CMD_OFFLOAD command typedef struct effect_offload_param_s { bool isOffload; // true if the playback thread the effect is attached to is offloaded |