| commit | c35015dc8c241992b8e7f2db15a9cd378589d1fd | [log] [tgz] |
|---|---|---|
| author | Paul Colta <donpaul@google.com> | Thu Jun 01 20:25:08 2023 +0000 |
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | Thu Jun 01 20:25:08 2023 +0000 |
| tree | ca048030c03559f3c077796a3067bb93e1c7628c | |
| parent | e691f16c3ac1d6cdcbbc6e2381f1e4a114777eac [diff] | |
| parent | e8fccd25c9e3650990ff8c9d30370d12c5eb90f9 [diff] |
HDMICEC: Out of Bounds Write in sendMessage in HdmiCec.cpp am: a93bdd0578 am: e8fccd25c9 Original change: https://googleplex-android-review.googlesource.com/c/platform/hardware/interfaces/+/23486967 Change-Id: Ifd9c0fd86c973a0a5f0d5b23f46766bcc177e6f4 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
diff --git a/tv/cec/1.0/default/HdmiCec.cpp b/tv/cec/1.0/default/HdmiCec.cpp index 74de785..f05f610 100644 --- a/tv/cec/1.0/default/HdmiCec.cpp +++ b/tv/cec/1.0/default/HdmiCec.cpp
@@ -307,6 +307,9 @@ } Return<SendMessageResult> HdmiCec::sendMessage(const CecMessage& message) { + if (message.body.size() > CEC_MESSAGE_BODY_MAX_LENGTH) { + return SendMessageResult::FAIL; + } cec_message_t legacyMessage { .initiator = static_cast<cec_logical_address_t>(message.initiator), .destination = static_cast<cec_logical_address_t>(message.destination),