diff options
| author | Abhishek Arya <aarya@google.com> | 2015-08-20 19:38:49 +0000 |
|---|---|---|
| committer | Android Git Automerger <android-git-automerger@android.com> | 2015-08-20 19:38:49 +0000 |
| commit | fb5c8f444cedd9be166e68631cb876f2b3e6f257 (patch) | |
| tree | 3e299d3185d46ab0261dc2a0f92438213d428a1f /media/libstagefright/rtsp | |
| parent | 2946707b893e558784f3fefe2e8552df15701cd4 (diff) | |
| parent | 99187615b2cb42e39842083c2998a97e8277a5d5 (diff) | |
| download | frameworks_av-fb5c8f444cedd9be166e68631cb876f2b3e6f257.zip frameworks_av-fb5c8f444cedd9be166e68631cb876f2b3e6f257.tar.gz frameworks_av-fb5c8f444cedd9be166e68631cb876f2b3e6f257.tar.bz2 | |
am 99187615: am d3b6f9c1: am c5b9a48f: am a27fe8d7: am 2fd79fa3: am cb2acbfe: am 635d38a8: Merge "Check RTSP payload length" into klp-dev
* commit '99187615b2cb42e39842083c2998a97e8277a5d5':
Check RTSP payload length
Diffstat (limited to 'media/libstagefright/rtsp')
| -rw-r--r-- | media/libstagefright/rtsp/AMPEG4AudioAssembler.cpp | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/media/libstagefright/rtsp/AMPEG4AudioAssembler.cpp b/media/libstagefright/rtsp/AMPEG4AudioAssembler.cpp index 1f76068..a1a6576 100644 --- a/media/libstagefright/rtsp/AMPEG4AudioAssembler.cpp +++ b/media/libstagefright/rtsp/AMPEG4AudioAssembler.cpp @@ -404,8 +404,9 @@ sp<ABuffer> AMPEG4AudioAssembler::removeLATMFraming(const sp<ABuffer> &buffer) { break; } } - - CHECK_LE(offset + payloadLength, buffer->size()); + + CHECK_LT(offset, buffer->size()); + CHECK_LE(payloadLength, buffer->size() - offset); memcpy(out->data() + out->size(), &ptr[offset], payloadLength); out->setRange(0, out->size() + payloadLength); |