HDMICEC: Out of Bounds Write in sendMessage in HdmiCec.cpp

Bug: 278243594
Test: m && m android.hardware.tv.cec@1.0 && m android.hardware.tv.cec@1.0-service && atest VtsHalTvCecV1_0TargetTest
Change-Id: I2989f66f41172b345e3047218e138358c18b8644
This commit is contained in:
Paul Colta
2023-05-15 10:18:18 +02:00
committed by Paul Colța
parent 87121a5145
commit 2371bc8191

View File

@@ -307,6 +307,9 @@ Return<void> HdmiCec::getPhysicalAddress(getPhysicalAddress_cb _hidl_cb) {
}
Return<SendMessageResult> HdmiCec::sendMessage(const CecMessage& message) {
if (message.body.size() > CEC_MESSAGE_BODY_MAX_LENGTH) {
return SendMessageResult::FAIL;
}
cec_message_t legacyMessage {
.initiator = static_cast<cec_logical_address_t>(message.initiator),
.destination = static_cast<cec_logical_address_t>(message.destination),