Android-x86
Fork
Donation

  • R/O
  • HTTP
  • SSH
  • HTTPS

frameworks-av: Commit

frameworks/av


Commit MetaInfo

Revision7a8f757369e43a9f13f32791693ce1341ba03844 (tree)
Time2020-05-08 11:58:54
AuthorChih-Wei Huang <cwhuang@linu...>
CommiterChih-Wei Huang

Log Message

Android 8.1.0 release 76
-----BEGIN PGP SIGNATURE-----

iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCXrBHAQAKCRDorT+BmrEO
eGFRAJ4ubKYQ6D3/fLL/KHUTzW4FUxiWyACeJTzjiVUrk17mdsiP7DUsiL/8Mxs=
=Z5Ye
-----END PGP SIGNATURE-----

Merge tag 'android-8.1.0_r76' into oreo-x86

Android 8.1.0 release 76

Change Summary

Incremental Difference

--- a/drm/libmediadrm/ICrypto.cpp
+++ b/drm/libmediadrm/ICrypto.cpp
@@ -264,8 +264,12 @@ status_t BnCrypto::onTransact(
264264 {
265265 CHECK_INTERFACE(ICrypto, data, reply);
266266
267- uint8_t uuid[16];
268- data.read(uuid, sizeof(uuid));
267+ uint8_t uuid[16] = {0};
268+ if (data.read(uuid, sizeof(uuid)) != NO_ERROR) {
269+ android_errorWriteLog(0x534e4554, "144767096");
270+ reply->writeInt32(BAD_VALUE);
271+ return OK;
272+ }
269273
270274 size_t opaqueSize = data.readInt32();
271275 void *opaqueData = NULL;
@@ -280,7 +284,11 @@ status_t BnCrypto::onTransact(
280284 return NO_MEMORY;
281285 }
282286
283- data.read(opaqueData, opaqueSize);
287+ if (data.read(opaqueData, opaqueSize) != NO_ERROR) {
288+ android_errorWriteLog(0x534e4554, "144767096");
289+ reply->writeInt32(BAD_VALUE);
290+ return OK;
291+ }
284292 reply->writeInt32(createPlugin(uuid, opaqueData, opaqueSize));
285293
286294 free(opaqueData);
--- a/media/libmedia/IHDCP.cpp
+++ b/media/libmedia/IHDCP.cpp
@@ -333,11 +333,12 @@ status_t BnHDCP::onTransact(
333333
334334 void *outData = (uint8_t *)inData + size;
335335
336- data.read(inData, size);
337-
338- uint32_t streamCTR = data.readInt32();
339- uint64_t inputCTR = data.readInt64();
340- status_t err = decrypt(inData, size, streamCTR, inputCTR, outData);
336+ status_t err = data.read(inData, size);
337+ if (err == OK) {
338+ uint32_t streamCTR = data.readInt32();
339+ uint64_t inputCTR = data.readInt64();
340+ err = decrypt(inData, size, streamCTR, inputCTR, outData);
341+ }
341342
342343 reply->writeInt32(err);
343344
Show on old repository browser