| commit | 420879d77301a70e227885438c3e53fce22fd29f | [log] [tgz] |
|---|---|---|
| author | Paul Colta <donpaul@google.com> | Thu Jun 01 20:28:30 2023 +0000 |
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | Thu Jun 01 20:28:30 2023 +0000 |
| tree | b485fadc150df6e4005f3140789e303ea987ea41 | |
| parent | bbfa7d70e7427197eafca20ed7cedc8155145d6c [diff] | |
| parent | e8fccd25c9e3650990ff8c9d30370d12c5eb90f9 [diff] |
HDMICEC: Out of Bounds Write in sendMessage in HdmiCec.cpp am: a93bdd0578 am: e8fccd25c9 Original change: https://googleplex-android-review.googlesource.com/c/platform/hardware/interfaces/+/23486967 Change-Id: If3d3ff32c59f11364de6a01cb6145cf6c5163ee7 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
diff --git a/tv/cec/1.0/default/HdmiCec.cpp b/tv/cec/1.0/default/HdmiCec.cpp index 74de785..f05f610 100644 --- a/tv/cec/1.0/default/HdmiCec.cpp +++ b/tv/cec/1.0/default/HdmiCec.cpp
@@ -307,6 +307,9 @@ } Return<SendMessageResult> HdmiCec::sendMessage(const CecMessage& message) { + if (message.body.size() > CEC_MESSAGE_BODY_MAX_LENGTH) { + return SendMessageResult::FAIL; + } cec_message_t legacyMessage { .initiator = static_cast<cec_logical_address_t>(message.initiator), .destination = static_cast<cec_logical_address_t>(message.destination),