diff options
| author | Praveen Chavan <pchavan@codeaurora.org> | 2016-03-21 12:43:42 -0700 |
|---|---|---|
| committer | Marco Nelissen <marcone@google.com> | 2016-04-05 08:25:28 -0700 |
| commit | 417bd6d3d293ef616a5a33741cfd6ac8c50f685f (patch) | |
| tree | 95f63832b1c0b533d3c022a1cccf81f3c81197e9 /msm8974/mm-video-v4l2/vidc/vdec | |
| parent | af0b35a2e7f4d246242c0f35fcde04858dd6670d (diff) | |
| download | media-417bd6d3d293ef616a5a33741cfd6ac8c50f685f.tar.gz | |
mm-video-v4l2: venc: add safety checks for freeing buffers
Allow only up to 64 buffers on input/output port (since the
allocation bitmap is only 64-wide).
Add safety checks to free only as many buffers were allocated.
Fixes: Heap Overflow and Possible Local Privilege Escalation in
MediaServer (libOmxVenc problem)
Bug: 27532497
Change-Id: I31e576ef9dc542df73aa6b0ea113d72724b50fc6
Diffstat (limited to 'msm8974/mm-video-v4l2/vidc/vdec')
0 files changed, 0 insertions, 0 deletions