From 77db8c7a4e23796f67aa092d04452316e4d9ec73 Mon Sep 17 00:00:00 2001 From: tobigun Date: Sun, 19 Jul 2015 14:15:38 +0200 Subject: Fix crash if Exif-Tag buffer-length and component-count are both 0 Change-Id: Iad9b60d135b4f682c08c3bfc9698cdd10e1086ab --- gallerycommon/src/com/android/gallery3d/exif/ExifOutputStream.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gallerycommon/src/com/android/gallery3d/exif/ExifOutputStream.java b/gallerycommon/src/com/android/gallery3d/exif/ExifOutputStream.java index 7ca05f2e0..4c2009fac 100644 --- a/gallerycommon/src/com/android/gallery3d/exif/ExifOutputStream.java +++ b/gallerycommon/src/com/android/gallery3d/exif/ExifOutputStream.java @@ -482,7 +482,7 @@ class ExifOutputStream extends FilterOutputStream { switch (tag.getDataType()) { case ExifTag.TYPE_ASCII: byte buf[] = tag.getStringByte(); - if (buf.length == tag.getComponentCount()) { + if (buf.length == tag.getComponentCount() && buf.length > 0) { buf[buf.length - 1] = 0; dataOutputStream.write(buf); } else { -- cgit v1.2.3