diff options
| author | Marco Nelissen <marcone@google.com> | 2020-09-30 16:28:55 -0700 |
|---|---|---|
| committer | Marco Nelissen <marcone@google.com> | 2020-09-30 23:40:21 +0000 |
| commit | 985ee50f8496233f9cadee15b5253df7f3de99ad (patch) | |
| tree | c4a463a495bb6d3d6445ce016ab2c61800d454c9 | |
| parent | 45012444868cc6cb064e02cefebcfecb7580312b (diff) | |
| download | sonivox-android11-mainline-extservices-release.tar.gz | |
Add bounds check for dls samplesandroid-mainline-11.0.0_r44android-mainline-11.0.0_r23android-mainline-11.0.0_r15android11-mainline-os-statsd-releaseandroid11-mainline-extservices-release
Bug: 151096540
Test: manual
Change-Id: Ia40bc8dfba512451438322bb720035973138bd7d
| -rw-r--r-- | arm-wt-22k/lib_src/eas_mdls.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/arm-wt-22k/lib_src/eas_mdls.c b/arm-wt-22k/lib_src/eas_mdls.c index 876ce9b..fac6987 100644 --- a/arm-wt-22k/lib_src/eas_mdls.c +++ b/arm-wt-22k/lib_src/eas_mdls.c @@ -1372,6 +1372,10 @@ static EAS_RESULT Parse_data (SDLS_SYNTHESIZER_DATA *pDLSData, EAS_I32 pos, EAS_ { return EAS_SUCCESS; } + if (sampleLen < sizeof(EAS_SAMPLE) + || (pWsmp->loopStart + pWsmp->loopLength) * sizeof(EAS_SAMPLE) > sampleLen - sizeof(EAS_SAMPLE)) { + return EAS_FAILURE; + } pSample[(pWsmp->loopStart + pWsmp->loopLength)>>1] = pSample[(pWsmp->loopStart)>>1]; } |