diff options
| author | rago <rago@google.com> | 2016-11-30 19:12:19 +0000 |
|---|---|---|
| committer | android-build-merger <android-build-merger@google.com> | 2016-11-30 19:12:19 +0000 |
| commit | 28d8817df3b1c4860344ab3c027f31b6e04009a7 (patch) | |
| tree | f7ccd69424eb27190c9d4af509f1705600ac783c | |
| parent | 56910cf52332219c6a23bc12596b261c127d93bf (diff) | |
| parent | 3f9a6d3bd97966999fa35b9423b8c0042c8198b3 (diff) | |
| download | libhardware-28d8817df3b1c4860344ab3c027f31b6e04009a7.tar.gz | |
Fix security vulnerability: potential OOB write in audioserver
am: 3f9a6d3bd9
Change-Id: Ia7aefc3e6e49f9e0105acc5fc816cd8e0bdd9cd9
| -rw-r--r-- | include/hardware/audio_effect.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/include/hardware/audio_effect.h b/include/hardware/audio_effect.h index b49d02d6..af5f0e75 100644 --- a/include/hardware/audio_effect.h +++ b/include/hardware/audio_effect.h @@ -895,6 +895,9 @@ typedef struct effect_param_s { char data[]; // Start of Parameter + Value data } effect_param_t; +// Maximum effect_param_t size +#define EFFECT_PARAM_SIZE_MAX 65536 + // structure used by EFFECT_CMD_OFFLOAD command typedef struct effect_offload_param_s { bool isOffload; // true if the playback thread the effect is attached to is offloaded |