am a4201c10
: am 592cc33c
: am e86f7e96
: am 3c0272ba
: am dc2d031a
: am da9fd70d
: am 2758eb2e
: am fde92eb0
: Update maxNumber to be smaller.
* commit 'a4201c10aeb977a6e4e8c1bcb9ceca5ab591d0ad': Update maxNumber to be smaller.
This commit is contained in:
commit
f6303459d1
@ -323,7 +323,11 @@ status_t GraphicBuffer::unflatten(
|
|||||||
const size_t numFds = static_cast<size_t>(buf[8]);
|
const size_t numFds = static_cast<size_t>(buf[8]);
|
||||||
const size_t numInts = static_cast<size_t>(buf[9]);
|
const size_t numInts = static_cast<size_t>(buf[9]);
|
||||||
|
|
||||||
const size_t maxNumber = UINT_MAX / sizeof(int);
|
// Limit the maxNumber to be relatively small. The number of fds or ints
|
||||||
|
// should not come close to this number, and the number itself was simply
|
||||||
|
// chosen to be high enough to not cause issues and low enough to prevent
|
||||||
|
// overflow problems.
|
||||||
|
const size_t maxNumber = 4096;
|
||||||
if (numFds >= maxNumber || numInts >= (maxNumber - 10)) {
|
if (numFds >= maxNumber || numInts >= (maxNumber - 10)) {
|
||||||
width = height = stride = format = usage = 0;
|
width = height = stride = format = usage = 0;
|
||||||
handle = NULL;
|
handle = NULL;
|
||||||
|
Loading…
Reference in New Issue
Block a user