am 2a8c49eb
: fix an out-of-bounds memory access
* commit '2a8c49eb5dd51b2e60c9a78bea00870867d91c03': fix an out-of-bounds memory access
This commit is contained in:
commit
1d3612f11c
@ -314,13 +314,15 @@ status_t BufferQueue::dequeueBuffer(int *outBuf, sp<Fence>& outFence,
|
|||||||
* the consumer may still have pending reads of the
|
* the consumer may still have pending reads of the
|
||||||
* buffers in flight.
|
* buffers in flight.
|
||||||
*/
|
*/
|
||||||
|
if (found >= 0) {
|
||||||
bool isOlder = mSlots[i].mFrameNumber <
|
bool isOlder = mSlots[i].mFrameNumber <
|
||||||
mSlots[found].mFrameNumber;
|
mSlots[found].mFrameNumber;
|
||||||
if (found < 0 || isOlder) {
|
if (isOlder) {
|
||||||
found = i;
|
found = i;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
}
|
||||||
|
|
||||||
// clients are not allowed to dequeue more than one buffer
|
// clients are not allowed to dequeue more than one buffer
|
||||||
// if they didn't set a buffer count.
|
// if they didn't set a buffer count.
|
||||||
|
Loading…
Reference in New Issue
Block a user