From f6a8d4f481fb17c271d84415761fb0e08794d8a2 Mon Sep 17 00:00:00 2001 From: tobigun Date: Sun, 19 Jul 2015 14:15:38 +0200 Subject: Fix crash if Exif-Tag buffer-length and component-count are both 0 Change-Id: Iad9b60d135b4f682c08c3bfc9698cdd10e1086ab --- WallpaperPicker/src/com/android/gallery3d/exif/ExifOutputStream.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/WallpaperPicker/src/com/android/gallery3d/exif/ExifOutputStream.java b/WallpaperPicker/src/com/android/gallery3d/exif/ExifOutputStream.java index 7ca05f2e0..4c2009fac 100644 --- a/WallpaperPicker/src/com/android/gallery3d/exif/ExifOutputStream.java +++ b/WallpaperPicker/src/com/android/gallery3d/exif/ExifOutputStream.java @@ -482,7 +482,7 @@ class ExifOutputStream extends FilterOutputStream { switch (tag.getDataType()) { case ExifTag.TYPE_ASCII: byte buf[] = tag.getStringByte(); - if (buf.length == tag.getComponentCount()) { + if (buf.length == tag.getComponentCount() && buf.length > 0) { buf[buf.length - 1] = 0; dataOutputStream.write(buf); } else { -- cgit v1.2.3