| commit | e770e378dc8e2320679272234285456ca2244a62 | [log] [tgz] |
|---|---|---|
| author | Emilian Peev <epeev@google.com> | Mon Nov 06 10:41:19 2017 +0000 |
| committer | android-build-team Robot <android-build-team-robot@google.com> | Tue Nov 28 03:33:29 2017 +0000 |
| tree | eba582dc8d09a29d1ad5b7163b243a6eeff26f2d | |
| parent | 34893ec78fce2961bccaee6f81448c2fcfb7811d [diff] |
Camera metadata: Check source metadata size Source size passed by client could be smaller than 'camera_metadata_t'. In this case the cast in 'allocate_copy_camera_metadata_checked()' will be incorrect and we will try to access invalid heap memory. Bug: 67782345 Test: Camera CTS Change-Id: I9582c704f414493978d09ffb603b5e8368cda5ce (cherry picked from commit 489bbd13bf0add8029444b9d9505b3d118776ea3)