commit 9a6861cbd3bb0e1b8fe4c105795256ee032f9664
author Jeff Tinker <jtinker@google.com> Fri Sep 02 11:36:46 2016 -0700
committer Jeff Tinker <jtinker@google.com> Fri Sep 02 18:40:40 2016 +0000
tree 68879d289cd3e1eceaab8e0a37a809d7d9ef1078
parent 50b9d889e637ff3c26e4582edc91ff0c2111fd6d

Fix stack content leak vulnerability in mediaserver

bug: 30875060
Change-Id: I03f4d08b7b31ac5b507cfc9e65e5607c73972d95

media/libmedia/IDrm.cpp

diff --git a/media/libmedia/IDrm.cpp b/media/libmedia/IDrm.cpp
index 7c709cd..6f6530b 100644
--- a/media/libmedia/IDrm.cpp
+++ b/media/libmedia/IDrm.cpp
@@ -912,7 +912,7 @@
             readVector(data, keyId);
             readVector(data, message);
             readVector(data, signature);
-            bool match;
+            bool match = false;
             uint32_t result = verify(sessionId, keyId, message, signature, match);
             reply->writeInt32(match);
             reply->writeInt32(result);