summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMarco Nelissen <marcone@google.com>2015-08-19 15:08:13 -0700
committerMarco Nelissen <marcone@google.com>2015-08-19 15:08:13 -0700
commit8a9f53ee2c661e8b5b94d6e9fbb8af3baa34310d (patch)
treea4e0b1e302f15d68f96ebcf3ba9d909e154611b6
parent11bb645de2de83cb48c94192d62f3828a36613b4 (diff)
downloadandroid_external_sonivox-8a9f53ee2c661e8b5b94d6e9fbb8af3baa34310d.tar.gz
android_external_sonivox-8a9f53ee2c661e8b5b94d6e9fbb8af3baa34310d.tar.bz2
android_external_sonivox-8a9f53ee2c661e8b5b94d6e9fbb8af3baa34310d.zip
Check segments and libs
Bug: 23286323 Change-Id: I95ee385d0fb1503a4ce5a96e30d034ac8b81170e
-rw-r--r--arm-wt-22k/lib_src/jet.c6
1 files changed, 6 insertions, 0 deletions
diff --git a/arm-wt-22k/lib_src/jet.c b/arm-wt-22k/lib_src/jet.c
index 97672cf..2f1541f 100644
--- a/arm-wt-22k/lib_src/jet.c
+++ b/arm-wt-22k/lib_src/jet.c
@@ -282,10 +282,16 @@ static EAS_RESULT JetParseInfoChunk (EAS_DATA_HANDLE easHandle, EAS_I32 pos, EAS
switch (infoType)
{
case INFO_NUM_SMF_CHUNKS:
+ if (temp >= JET_MAX_SEGMENTS) {
+ return EAS_ERROR_INCOMPATIBLE_VERSION;
+ }
easHandle->jetHandle->numSegments = (EAS_U8) temp;
break;
case INFO_NUM_DLS_CHUNKS:
+ if (temp >= JET_MAX_DLS_COLLECTIONS) {
+ return EAS_ERROR_INCOMPATIBLE_VERSION;
+ }
easHandle->jetHandle->numLibraries = (EAS_U8) temp;
break;