summaryrefslogtreecommitdiffstats
path: root/media
diff options
context:
space:
mode:
authorJeff Tinker <jtinker@google.com>2015-09-17 17:28:47 +0000
committerAndroid Git Automerger <android-git-automerger@android.com>2015-09-17 17:28:47 +0000
commit4554ffd7a1c4bc6973c11c00f5a19aa260e18100 (patch)
treef060c7688a407b2d2ba92ac03ffc56b0758f8ca5 /media
parent52b829cbc2cb947733f312211a007ecd2f9fe96b (diff)
parent6272fa1baf361a6a89607243638cc592047947b3 (diff)
downloadframeworks_av-4554ffd7a1c4bc6973c11c00f5a19aa260e18100.zip
frameworks_av-4554ffd7a1c4bc6973c11c00f5a19aa260e18100.tar.gz
frameworks_av-4554ffd7a1c4bc6973c11c00f5a19aa260e18100.tar.bz2
am 6272fa1b: Merge "DO NOT MERGE Fix vulnerability in mediaserver" into klp-dev
* commit '6272fa1baf361a6a89607243638cc592047947b3': DO NOT MERGE Fix vulnerability in mediaserver
Diffstat (limited to 'media')
-rw-r--r--media/libmedia/ICrypto.cpp2
1 files changed, 2 insertions, 0 deletions
diff --git a/media/libmedia/ICrypto.cpp b/media/libmedia/ICrypto.cpp
index 2053c45..918d725 100644
--- a/media/libmedia/ICrypto.cpp
+++ b/media/libmedia/ICrypto.cpp
@@ -236,6 +236,7 @@ status_t BnCrypto::onTransact(
size_t totalSize = data.readInt32();
void *srcData = malloc(totalSize);
+ memset(srcData, 0, totalSize);
data.read(srcData, totalSize);
int32_t numSubSamples = data.readInt32();
@@ -252,6 +253,7 @@ status_t BnCrypto::onTransact(
secureBufferId = (void *)data.readIntPtr();
} else {
dstPtr = malloc(totalSize);
+ memset(dstPtr, 0, totalSize);
}
AString errorDetailMsg;