commit 19d1113bb0fd9ccd4b6b6d351da7ad97027bcbde
author Android Build Merger (Role) <noreply-android-build-merger@google.com> Tue Jun 05 01:54:55 2018 +0000
committer Android Build Merger (Role) <noreply-android-build-merger@google.com> Tue Jun 05 01:54:55 2018 +0000
tree 7dd1c9d86cc3e8abd7143564d808d447c4aec46d
parent 6801c15049b2f013bc52075df54aa87fedf27e91
parent bad0533d2ea29feb710cb8195206a05bf187b69f

[automerger] Fix possible out of bounds read am: 3762e06152 am: ecc92a1a86 am: 1c7bb87a42 am: 4cdd5c3af5 am: bad0533d2e

Change-Id: Ia5a88da9a0fb034270bacc91b2079e56faecc100

media/libstagefright/id3/ID3.cpp

diff --git a/media/libstagefright/id3/ID3.cpp b/media/libstagefright/id3/ID3.cpp
index 4e1cdf6..ca2be54 100644
--- a/media/libstagefright/id3/ID3.cpp
+++ b/media/libstagefright/id3/ID3.cpp
@@ -603,6 +603,9 @@
         // UCS-2
         // API wants number of characters, not number of bytes...
         int len = n / 2;
+        if (len == 0) {
+            return;
+        }
         const char16_t *framedata = (const char16_t *) (frameData + 1);
         char16_t *framedatacopy = NULL;
         if (*framedata == 0xfffe) {