From acd31516c6d4db2816727443582f225e21be501c Mon Sep 17 00:00:00 2001 From: Mathias Agopian Date: Wed, 30 May 2012 18:08:30 -0700 Subject: fix a potential buffer overflow in sensorservice Bug: 6580560 Change-Id: Icf6cafbca09174515a964a7cd69d8cc589ad52de --- services/sensorservice/SensorService.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'services') diff --git a/services/sensorservice/SensorService.cpp b/services/sensorservice/SensorService.cpp index 04ec820..9e5e84b 100644 --- a/services/sensorservice/SensorService.cpp +++ b/services/sensorservice/SensorService.cpp @@ -226,7 +226,7 @@ bool SensorService::threadLoop() ALOGD("nuSensorService thread starting..."); const size_t numEventMax = 16; - const size_t minBufferSize = numEventMax * mVirtualSensorList.size(); + const size_t minBufferSize = numEventMax + numEventMax * mVirtualSensorList.size(); sensors_event_t buffer[minBufferSize]; sensors_event_t scratch[minBufferSize]; SensorDevice& device(SensorDevice::getInstance()); -- cgit v1.1