-
David Stevens authored
Check that the visible size of a decoded buffer is smaller than the coded size. Returning an error here prevents a later crash due to VideoFrame::IsValidConfig failing. Bug: b:170727869 Test: android.security.cts.StagefrightTest#testStagefright_cve_2016_2454 on trogdor Change-Id: I2df5fcb345b925bca9804b5898b15d02df64ce4f Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2551854Reviewed-by:
Alexandre Courbot <acourbot@chromium.org> Reviewed-by:
Chih-Yu Huang <akahuang@chromium.org> Commit-Queue: David Stevens <stevensd@chromium.org> Cr-Commit-Position: refs/heads/master@{#831239}
05cdfc36