diff options
author | Eric Laurent <elaurent@google.com> | 2014-11-05 22:15:32 +0000 |
---|---|---|
committer | Android Git Automerger <android-git-automerger@android.com> | 2014-11-05 22:15:32 +0000 |
commit | 5fa013ea79066ec47589f38f94f557d021bd56eb (patch) | |
tree | cc484fcfe9b7242e55ac0d311c5850ab122c738e | |
parent | d202ac37fc1f5f31e180af55cebd22810a80251b (diff) | |
parent | 7e31774e7195bc0479e1a09b2ef8a114e893598f (diff) | |
download | frameworks_av-5fa013ea79066ec47589f38f94f557d021bd56eb.zip frameworks_av-5fa013ea79066ec47589f38f94f557d021bd56eb.tar.gz frameworks_av-5fa013ea79066ec47589f38f94f557d021bd56eb.tar.bz2 |
am 7e31774e: am 74adca9a: IAudioPolicyService: bound array size in queryDefaultPreProcessing
* commit '7e31774e7195bc0479e1a09b2ef8a114e893598f':
IAudioPolicyService: bound array size in queryDefaultPreProcessing
-rw-r--r-- | include/media/AudioEffect.h | 9 | ||||
-rw-r--r-- | media/libmedia/IAudioPolicyService.cpp | 9 |
2 files changed, 13 insertions, 5 deletions
diff --git a/include/media/AudioEffect.h b/include/media/AudioEffect.h index 4932d40..583695d 100644 --- a/include/media/AudioEffect.h +++ b/include/media/AudioEffect.h @@ -133,10 +133,11 @@ public: * * Returned value * *descriptor updated with descriptors of pre processings enabled by default - * *count number of descriptors returned if returned status is N_ERROR. + * *count number of descriptors returned if returned status is NO_ERROR. * total number of pre processing enabled by default if returned status is * NO_MEMORY. This happens if the count passed as input is less than the number - * of descriptors to return + * of descriptors to return. + * *count is limited to kMaxPreProcessing on return. */ static status_t queryDefaultPreProcessing(int audioSession, effect_descriptor_t *descriptors, @@ -391,6 +392,10 @@ public: */ static status_t guidToString(const effect_uuid_t *guid, char *str, size_t maxLen); + // kMaxPreProcessing is a reasonable value for the maximum number of preprocessing effects + // that can be applied simultaneously. + static const uint32_t kMaxPreProcessing = 10; + protected: bool mEnabled; // enable state int32_t mSessionId; // audio session ID diff --git a/media/libmedia/IAudioPolicyService.cpp b/media/libmedia/IAudioPolicyService.cpp index 256cb3f..180f5fb 100644 --- a/media/libmedia/IAudioPolicyService.cpp +++ b/media/libmedia/IAudioPolicyService.cpp @@ -23,6 +23,7 @@ #include <binder/Parcel.h> +#include <media/AudioEffect.h> #include <media/IAudioPolicyService.h> #include <system/audio.h> @@ -916,16 +917,18 @@ status_t BnAudioPolicyService::onTransact( CHECK_INTERFACE(IAudioPolicyService, data, reply); int audioSession = data.readInt32(); uint32_t count = data.readInt32(); + if (count > AudioEffect::kMaxPreProcessing) { + count = AudioEffect::kMaxPreProcessing; + } uint32_t retCount = count; - effect_descriptor_t *descriptors = - (effect_descriptor_t *)new char[count * sizeof(effect_descriptor_t)]; + effect_descriptor_t *descriptors = new effect_descriptor_t[count]; status_t status = queryDefaultPreProcessing(audioSession, descriptors, &retCount); reply->writeInt32(status); if (status != NO_ERROR && status != NO_MEMORY) { retCount = 0; } reply->writeInt32(retCount); - if (retCount) { + if (retCount != 0) { if (retCount < count) { count = retCount; } |