diff options
| author | Wei Jia <wjia@google.com> | 2015-08-20 04:10:56 +0000 | 
|---|---|---|
| committer | Android Git Automerger <android-git-automerger@android.com> | 2015-08-20 04:10:56 +0000 | 
| commit | a9b3cd3c101b68522a3d8492cb3a19d8b5409329 (patch) | |
| tree | e849016209326c1b563ed92be7ab2d0518419b92 /media | |
| parent | fd5942b332c5f6e4dc50f50181344957334854e1 (diff) | |
| parent | 5221133bfa1585b4488b01cad165627b1cd17077 (diff) | |
| download | frameworks_av-a9b3cd3c101b68522a3d8492cb3a19d8b5409329.zip frameworks_av-a9b3cd3c101b68522a3d8492cb3a19d8b5409329.tar.gz frameworks_av-a9b3cd3c101b68522a3d8492cb3a19d8b5409329.tar.bz2  | |
am 5221133b: am b2ae4351: libstagefright: fix overflow in pvdec_api.cpp.
* commit '5221133bfa1585b4488b01cad165627b1cd17077':
  libstagefright: fix overflow in pvdec_api.cpp.
Diffstat (limited to 'media')
| -rw-r--r-- | media/libstagefright/codecs/m4v_h263/dec/src/pvdec_api.cpp | 4 | 
1 files changed, 2 insertions, 2 deletions
diff --git a/media/libstagefright/codecs/m4v_h263/dec/src/pvdec_api.cpp b/media/libstagefright/codecs/m4v_h263/dec/src/pvdec_api.cpp index 419e3f4..30d5cbd 100644 --- a/media/libstagefright/codecs/m4v_h263/dec/src/pvdec_api.cpp +++ b/media/libstagefright/codecs/m4v_h263/dec/src/pvdec_api.cpp @@ -338,7 +338,7 @@ Bool PVAllocVideoData(VideoDecControls *decCtrl, int width, int height, int nLay      video->prevVop->uChan = video->prevVop->yChan + size;      video->prevVop->vChan = video->prevVop->uChan + (size >> 2);  #else -    if (size > INT32_MAX / 3 * 2) { +    if (size > INT32_MAX / 3) {          return PV_FALSE;      }      video->currVop->yChan = (PIXEL *) oscl_malloc(size * 3 / 2); /* Allocate memory for all VOP OKA 3/2/1*/ @@ -368,7 +368,7 @@ Bool PVAllocVideoData(VideoDecControls *decCtrl, int width, int height, int nLay          {              oscl_memset(video->prevEnhcVop, 0, sizeof(Vop));  #ifndef PV_MEMORY_POOL -            if (size > INT32_MAX / 3 * 2) { +            if (size > INT32_MAX / 3) {                  return PV_FALSE;              }  | 
