GitLab

Check that the visible size of a decoded buffer is smaller than the
coded size. Returning an error here prevents a later crash due to
VideoFrame::IsValidConfig failing.

Bug: b:170727869
Test: android.security.cts.StagefrightTest#testStagefright_cve_2016_2454 on trogdor
Change-Id: I2df5fcb345b925bca9804b5898b15d02df64ce4f
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2551854Reviewed-by: Alexandre Courbot <acourbot@chromium.org>
Reviewed-by: Chih-Yu Huang <akahuang@chromium.org>
Commit-Queue: David Stevens <stevensd@chromium.org>
Cr-Commit-Position: refs/heads/master@{#831239}