commit 3264b251353c37d7efc8ffb6e420dd71b6b62349
author Wei Jia <wjia@google.com> Mon Aug 17 21:07:57 2015 +0000
committer Android Git Automerger <android-git-automerger@android.com> Mon Aug 17 21:07:57 2015 +0000
tree 6ba9fe1b1abc4d9afb14dbc6a084c0a4594a574e
parent 5d1103e5a229401a4c4e0cb7dd91b2742881ff92
parent 39ff8149466ee8e86c0336f706cd4dd3713f359f

am 39ff8149: Merge "libstagefright: fix possible overflow in SampleTable.cpp" into mnc-dev

* commit '39ff8149466ee8e86c0336f706cd4dd3713f359f':
  libstagefright: fix possible overflow in SampleTable.cpp

media/libstagefright/SampleTable.cpp

diff --git a/media/libstagefright/SampleTable.cpp b/media/libstagefright/SampleTable.cpp
index 40df34d..aeef99f 100644
--- a/media/libstagefright/SampleTable.cpp
+++ b/media/libstagefright/SampleTable.cpp
@@ -336,7 +336,7 @@
 
     mTimeToSampleCount = U32_AT(&header[4]);
     uint64_t allocSize = (uint64_t)mTimeToSampleCount * 2 * sizeof(uint32_t);
-    if (allocSize > SIZE_MAX) {
+    if (allocSize > UINT32_MAX) {
         return ERROR_OUT_OF_RANGE;
     }
     mTimeToSample = new (std::nothrow) uint32_t[mTimeToSampleCount * 2];
@@ -384,7 +384,7 @@
 
     mNumCompositionTimeDeltaEntries = numEntries;
     uint64_t allocSize = (uint64_t)numEntries * 2 * sizeof(uint32_t);
-    if (allocSize > SIZE_MAX) {
+    if (allocSize > UINT32_MAX) {
         return ERROR_OUT_OF_RANGE;
     }