Skip to content
Permalink
Browse files

libstagefright: check remaining data size before parsing it.

Bug: 23248776
Change-Id: I45cf53e58e4375afcf260b122264c968ec0ff6c8
(cherry picked from commit 3bf1e0f)
  • Loading branch information...
Wei Jia authored and andi34 committed Aug 17, 2015
1 parent fa16aa6 commit 8ab32451ab01e60bbc29061dc0a05705e38ec09e
Showing with 3 additions and 0 deletions.
  1. +3 −0 media/libstagefright/id3/ID3.cpp
@@ -547,6 +547,9 @@ void ID3::Iterator::getstring(String8 *id, bool otherdata) const {
return;
}

if (mFrameSize < getHeaderLength() + 1) {
return;
}
size_t n = mFrameSize - getHeaderLength() - 1;
if (otherdata) {
// skip past the encoding, language, and the 0 separator

0 comments on commit 8ab3245

Please sign in to comment.
You can’t perform that action at this time.