summaryrefslogtreecommitdiffstats
path: root/media
diff options
context:
space:
mode:
authorMarco Nelissen <marcone@google.com>2015-09-17 15:48:37 -0700
committerSteve Kondik <steve@cyngn.com>2016-03-22 17:14:35 -0700
commitb821ad110a85fa27f84e732ecbf7322319ec4db9 (patch)
treeb6a14b3ce952856f9bf7b6e80bbea40ce0551c6b /media
parent4e35e8fa2a6c3d06a1de0add38ee8e994fcf2d42 (diff)
downloadframeworks_av-b821ad110a85fa27f84e732ecbf7322319ec4db9.zip
frameworks_av-b821ad110a85fa27f84e732ecbf7322319ec4db9.tar.gz
frameworks_av-b821ad110a85fa27f84e732ecbf7322319ec4db9.tar.bz2
Fix integer overflow in time conversion
Converting unix epoch time to mpeg4 time requires adding over 2B seconds, which caused an overflow in a calculation involving time_t, which is signed. Bug: 23574783 Change-Id: I21bacc9f5a422091f3c903fb8cf1c760fc078953
Diffstat (limited to 'media')
-rw-r--r--media/libstagefright/MPEG4Writer.cpp6
1 files changed, 5 insertions, 1 deletions
diff --git a/media/libstagefright/MPEG4Writer.cpp b/media/libstagefright/MPEG4Writer.cpp
index 2f1b6ac..f5e0fbf 100644
--- a/media/libstagefright/MPEG4Writer.cpp
+++ b/media/libstagefright/MPEG4Writer.cpp
@@ -1023,7 +1023,11 @@ uint32_t MPEG4Writer::getMpeg4Time() {
// MP4 file uses time counting seconds since midnight, Jan. 1, 1904
// while time function returns Unix epoch values which starts
// at 1970-01-01. Lets add the number of seconds between them
- uint32_t mpeg4Time = now + (66 * 365 + 17) * (24 * 60 * 60);
+ static const uint32_t delta = (66 * 365 + 17) * (24 * 60 * 60);
+ if (now < 0 || uint32_t(now) > UINT32_MAX - delta) {
+ return 0;
+ }
+ uint32_t mpeg4Time = uint32_t(now) + delta;
return mpeg4Time;
}