diff options
| author | Edwin Wong <edwinwong@google.com> | 2019-11-26 17:52:52 -0800 |
|---|---|---|
| committer | Edwin Wong <edwinwong@google.com> | 2020-01-08 01:29:58 +0000 |
| commit | b92e3bf778ab8dcf28193cfb63c40dd964644c47 (patch) | |
| tree | 6264825f410a8c258c40002cedeb448869b1c2b4 /drm/mediadrm/plugins/clearkey/hidl/CryptoPlugin.cpp | |
| parent | 7b254210fe701b9023d1db342c6d1c884d39efe7 (diff) | |
| download | frameworks_av-b92e3bf778ab8dcf28193cfb63c40dd964644c47.tar.gz frameworks_av-b92e3bf778ab8dcf28193cfb63c40dd964644c47.tar.bz2 frameworks_av-b92e3bf778ab8dcf28193cfb63c40dd964644c47.zip | |
[DO NOT MERGE] Fix heap buffer overflow for releaseSecureStops.
If the input SecureStopRelease size is less than sizeof(uint32_t)
in releaseSecureStops(), an out of bound read will occur.
bug: 144766455
bug: 144746235
bug: 147281068
Test: sts
ANDROID_BUILD_TOP= ./android-sts/tools/sts-tradefed run sts-engbuild-no-spl-lock -m StsHostTestCases --test android.security.sts.Poc19_11#testPocBug_144766455
Change-Id: Ibee5a105eaedfee37d2fa93f7024f63f30cc7409
Diffstat (limited to 'drm/mediadrm/plugins/clearkey/hidl/CryptoPlugin.cpp')
0 files changed, 0 insertions, 0 deletions