summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorrago <rago@google.com>2016-11-30 20:16:28 +0000
committerandroid-build-merger <android-build-merger@google.com>2016-11-30 20:16:28 +0000
commitecab7b65476d87092ba464bc1b733c0623061148 (patch)
treed2e405d316de14e6cdccc938d31e7c8f33bececd
parentc1ded2afef390c05dd40a271fcca20febf5cf967 (diff)
parent66b8752e83eac09928015cf8a826d4c36d5cffa4 (diff)
downloadlibhardware-ecab7b65476d87092ba464bc1b733c0623061148.tar.gz
Fix security vulnerability: potential OOB write in audioserver am: 3f9a6d3bd9 am: 28d8817df3 am: 750a6a4ed8 am: 559dbde531 am: 4654f9ab8b am: 4154f08e79 am: 2ebeab8c6b am: c196433170 am: cd6ebe9b27 am: 21c9c6dc69 am: 3110aeafeb am: c5ced57319
am: 66b8752e83 Change-Id: I1aa2ef6f03391f9f53630f030b6bbef12e1a019d
-rw-r--r--include/hardware/audio_effect.h3
1 files changed, 3 insertions, 0 deletions
diff --git a/include/hardware/audio_effect.h b/include/hardware/audio_effect.h
index e49980d1..8a88414a 100644
--- a/include/hardware/audio_effect.h
+++ b/include/hardware/audio_effect.h
@@ -911,6 +911,9 @@ typedef struct effect_param_s {
char data[]; // Start of Parameter + Value data
} effect_param_t;
+// Maximum effect_param_t size
+#define EFFECT_PARAM_SIZE_MAX 65536
+
// structure used by EFFECT_CMD_OFFLOAD command
typedef struct effect_offload_param_s {
bool isOffload; // true if the playback thread the effect is attached to is offloaded