commit a969613f2e0784e2c06d4e76ac6de9571e31f208
author Jeff Tinker <jtinker@google.com> Wed Sep 07 19:22:21 2016 +0000
committer android-build-merger <android-build-merger@google.com> Wed Sep 07 19:22:21 2016 +0000
tree 45e875c390355a62fb8386f3799237250a196593
parent 6691010ce34238d94555f2cd52dc4285fff905f8
parent dd7e169bd1e6bc1688ffb732b8fa1c75656ae719

Fix stack content leak vulnerability in mediaserver am: 9a6861cbd3 am: 647f55d75d am: b6d08633e9 am: 7d616daf2b am: b57b64d46d am: 9ede6cef5e
am: dd7e169bd1

Change-Id: I7ba19831be3fb5e82c1f0b968f00abadbc8f38a7

media/libmedia/IDrm.cpp

diff --git a/media/libmedia/IDrm.cpp b/media/libmedia/IDrm.cpp
index 7f131f4..51a1130 100644
--- a/media/libmedia/IDrm.cpp
+++ b/media/libmedia/IDrm.cpp
@@ -891,7 +891,7 @@
             readVector(data, keyId);
             readVector(data, message);
             readVector(data, signature);
-            bool match;
+            bool match = false;
             uint32_t result = verify(sessionId, keyId, message, signature, match);
             reply->writeInt32(match);
             reply->writeInt32(result);