diff options
| author | Emilian Peev <epeev@google.com> | 2018-05-11 09:53:13 +0100 |
|---|---|---|
| committer | MSe <mse1969@posteo.de> | 2018-07-15 23:18:25 +0200 |
| commit | 81033a2c8ce4203e32059544c48037abcc383f84 (patch) | |
| tree | e7f11cb29c233a2eb11a2660256f6a37ef7fc94c | |
| parent | 526995393ca037af0859a11706ef78ea35a9524a (diff) | |
| download | android_system_media-cm-14.1.tar.gz android_system_media-cm-14.1.tar.bz2 android_system_media-cm-14.1.zip | |
Merge commit 'f9e3022c474619c69a46ae7dbe11b5b531dbad57' into am-0d58d39a-0539-474e-b9c8-36cc976d15e8cm-14.1
* commit 'f9e3022c474619c69a46ae7dbe11b5b531dbad57':
Camera: Initialize metadata padding field
Test: Camera CTS
Bug: 77238656
Change-Id: I6c8b3138a0e2176228180d7b1edc9f9352d0c07f
(cherry picked from commit 6837fddebdc0ee6afe15517a620f754d88a3da42)
CVE-2018-9420
| -rw-r--r-- | camera/src/camera_metadata.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/camera/src/camera_metadata.c b/camera/src/camera_metadata.c index 357c685d..99fe4116 100644 --- a/camera/src/camera_metadata.c +++ b/camera/src/camera_metadata.c @@ -189,7 +189,7 @@ camera_metadata_t *allocate_copy_camera_metadata_checked( return NULL; } - void *buffer = malloc(src_size); + void *buffer = calloc(1, src_size); memcpy(buffer, src, src_size); camera_metadata_t *metadata = (camera_metadata_t*) buffer; @@ -206,7 +206,7 @@ camera_metadata_t *allocate_camera_metadata(size_t entry_capacity, size_t memory_needed = calculate_camera_metadata_size(entry_capacity, data_capacity); - void *buffer = malloc(memory_needed); + void *buffer = calloc(1, memory_needed); return place_camera_metadata(buffer, memory_needed, entry_capacity, data_capacity); |