diff options
| author | Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de> | 2017-02-11 22:43:10 +0100 |
|---|---|---|
| committer | Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de> | 2017-02-11 22:43:10 +0100 |
| commit | 26718276fd99ef60d9646d79467d2bb3f2db5549 (patch) | |
| tree | fa47c708c4a931e0506f6ea5a212aa2a433c8b38 /services/audioflinger/Effects.cpp | |
| parent | e9c0ba1859c0f5890fed280e03d0328311234cce (diff) | |
| parent | ad990eb12c7aff3c4bcdd50cae90b2b7c20041e6 (diff) | |
| download | frameworks_av-26718276fd99ef60d9646d79467d2bb3f2db5549.zip frameworks_av-26718276fd99ef60d9646d79467d2bb3f2db5549.tar.gz frameworks_av-26718276fd99ef60d9646d79467d2bb3f2db5549.tar.bz2 | |
Merge branch 'cm-13.0' of https://github.com/LineageOS/android_frameworks_av into replicant-6.0
Diffstat (limited to 'services/audioflinger/Effects.cpp')
| -rw-r--r-- | services/audioflinger/Effects.cpp | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/services/audioflinger/Effects.cpp b/services/audioflinger/Effects.cpp index 5505d2e..d46c10e 100644 --- a/services/audioflinger/Effects.cpp +++ b/services/audioflinger/Effects.cpp @@ -571,6 +571,13 @@ status_t AudioFlinger::EffectModule::command(uint32_t cmdCode, android_errorWriteLog(0x534e4554, "29251553"); return -EINVAL; } + if (cmdCode == EFFECT_CMD_GET_PARAM && + (sizeof(effect_param_t) > cmdSize || + ((effect_param_t *)pCmdData)->psize > cmdSize + - sizeof(effect_param_t))) { + android_errorWriteLog(0x534e4554, "32438594"); + return -EINVAL; + } if ((cmdCode == EFFECT_CMD_SET_PARAM || cmdCode == EFFECT_CMD_SET_PARAM_DEFERRED) && // DEFERRED not generally used (sizeof(effect_param_t) > cmdSize |