| commit | 747188ee01144be3f3e50bb5cc571fdc4dcbe931 | [log] [tgz] |
|---|---|---|
| author | Paul Colta <donpaul@google.com> | Thu Jun 01 19:44:23 2023 +0000 |
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | Thu Jun 01 19:44:23 2023 +0000 |
| tree | 07b5ecabc7524d140595f753f2e2e4b2da1c6f4a | |
| parent | 5be5cb7a40c00aeb889a34e0ba1b3390bff71a0f [diff] | |
| parent | a93bdd057828d0f29707a378d7a4de259be74839 [diff] |
HDMICEC: Out of Bounds Write in sendMessage in HdmiCec.cpp am: a93bdd0578 Original change: https://googleplex-android-review.googlesource.com/c/platform/hardware/interfaces/+/23486967 Change-Id: I3a3bb717f4e4354a6d25d565e2b949b8838f135f Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
diff --git a/tv/cec/1.0/default/HdmiCec.cpp b/tv/cec/1.0/default/HdmiCec.cpp index 74de785..f05f610 100644 --- a/tv/cec/1.0/default/HdmiCec.cpp +++ b/tv/cec/1.0/default/HdmiCec.cpp
@@ -307,6 +307,9 @@ } Return<SendMessageResult> HdmiCec::sendMessage(const CecMessage& message) { + if (message.body.size() > CEC_MESSAGE_BODY_MAX_LENGTH) { + return SendMessageResult::FAIL; + } cec_message_t legacyMessage { .initiator = static_cast<cec_logical_address_t>(message.initiator), .destination = static_cast<cec_logical_address_t>(message.destination),