| commit | 489bbd13bf0add8029444b9d9505b3d118776ea3 | [log] [tgz] |
|---|---|---|
| author | Emilian Peev <epeev@google.com> | Mon Nov 06 10:41:19 2017 +0000 |
| committer | Emilian Peev <epeev@google.com> | Mon Nov 06 13:08:34 2017 +0000 |
| tree | 306194e5492694f27f0aa5d0917ebfeac2f3466b | |
| parent | 960cba3e1b536563f110cc7094883c7c78b056ad [diff] |
Camera metadata: Check source metadata size Source size passed by client could be smaller than 'camera_metadata_t'. In this case the cast in 'allocate_copy_camera_metadata_checked()' will be incorrect and we will try to access invalid heap memory. Bug: 67782345 Test: Camera CTS Change-Id: I9582c704f414493978d09ffb603b5e8368cda5ce