commit 47bfaf57c2fe88b29a1d6e05dfc1fc35e7d08697
author Wei Jia <wjia@google.com> Mon Aug 17 21:32:08 2015 +0000
committer Android Git Automerger <android-git-automerger@android.com> Mon Aug 17 21:32:08 2015 +0000
tree 5636fa2bd7dcf533742d93b329fb671ce0e42b78
parent 6b97d2600c347ad807a5177c885bda0690142ea8
parent 3264b251353c37d7efc8ffb6e420dd71b6b62349

am 3264b251: am 39ff8149: Merge "libstagefright: fix possible overflow in SampleTable.cpp" into mnc-dev

* commit '3264b251353c37d7efc8ffb6e420dd71b6b62349':
  libstagefright: fix possible overflow in SampleTable.cpp

media/libstagefright/SampleTable.cpp

diff --git a/media/libstagefright/SampleTable.cpp b/media/libstagefright/SampleTable.cpp
index 40df34d..aeef99f 100644
--- a/media/libstagefright/SampleTable.cpp
+++ b/media/libstagefright/SampleTable.cpp
@@ -336,7 +336,7 @@
 
     mTimeToSampleCount = U32_AT(&header[4]);
     uint64_t allocSize = (uint64_t)mTimeToSampleCount * 2 * sizeof(uint32_t);
-    if (allocSize > SIZE_MAX) {
+    if (allocSize > UINT32_MAX) {
         return ERROR_OUT_OF_RANGE;
     }
     mTimeToSample = new (std::nothrow) uint32_t[mTimeToSampleCount * 2];
@@ -384,7 +384,7 @@
 
     mNumCompositionTimeDeltaEntries = numEntries;
     uint64_t allocSize = (uint64_t)numEntries * 2 * sizeof(uint32_t);
-    if (allocSize > SIZE_MAX) {
+    if (allocSize > UINT32_MAX) {
         return ERROR_OUT_OF_RANGE;
     }