commit | 1d9f88105eeb43beacd8f9c9c016708008785bf9 | [log] [tgz] |
---|---|---|
author | Emilian Peev <epeev@google.com> | Mon Nov 06 10:41:19 2017 +0000 |
committer | Nikoli Cartagena <dargeren@google.com> | Mon Nov 13 17:30:12 2017 -0800 |
tree | 00e4d3d01c5936da616da79a270b4b488d5cb8b0 | |
parent | e12085b0c596a85192fb124a0d5f8c652b55a3ef [diff] |
Camera metadata: Check source metadata size Source size passed by client could be smaller than 'camera_metadata_t'. In this case the cast in 'allocate_copy_camera_metadata_checked()' will be incorrect and we will try to access invalid heap memory. Bug: 67782345 Test: Camera CTS Change-Id: I9582c704f414493978d09ffb603b5e8368cda5ce (cherry picked from commit 489bbd13bf0add8029444b9d9505b3d118776ea3)