diff options
| author | Mathias Agopian <mathias@google.com> | 2012-05-30 18:08:30 -0700 |
|---|---|---|
| committer | Mathias Agopian <mathias@google.com> | 2012-05-30 18:08:30 -0700 |
| commit | acd31516c6d4db2816727443582f225e21be501c (patch) | |
| tree | 9a8c93f46365b0af62212c67c08b1601d8de2131 /services | |
| parent | 75856e969149fb2e221ece014670fdc39562747e (diff) | |
| download | frameworks_base-acd31516c6d4db2816727443582f225e21be501c.zip frameworks_base-acd31516c6d4db2816727443582f225e21be501c.tar.gz frameworks_base-acd31516c6d4db2816727443582f225e21be501c.tar.bz2 | |
fix a potential buffer overflow in sensorservice
Bug: 6580560
Change-Id: Icf6cafbca09174515a964a7cd69d8cc589ad52de
Diffstat (limited to 'services')
| -rw-r--r-- | services/sensorservice/SensorService.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/services/sensorservice/SensorService.cpp b/services/sensorservice/SensorService.cpp index 04ec820..9e5e84b 100644 --- a/services/sensorservice/SensorService.cpp +++ b/services/sensorservice/SensorService.cpp @@ -226,7 +226,7 @@ bool SensorService::threadLoop() ALOGD("nuSensorService thread starting..."); const size_t numEventMax = 16; - const size_t minBufferSize = numEventMax * mVirtualSensorList.size(); + const size_t minBufferSize = numEventMax + numEventMax * mVirtualSensorList.size(); sensors_event_t buffer[minBufferSize]; sensors_event_t scratch[minBufferSize]; SensorDevice& device(SensorDevice::getInstance()); |