HDMICEC: Out of Bounds Write in sendMessage in HdmiCec.cpp am: a93bdd0578

Original change: https://googleplex-android-review.googlesource.com/c/platform/hardware/interfaces/+/23486967

Change-Id: I5432179a2b5deb6d6d764ddf7da044e6e4010dee
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Paul Colta
2023-06-01 19:44:47 +00:00
committed by Automerger Merge Worker

View File

@@ -307,6 +307,9 @@ Return<void> HdmiCec::getPhysicalAddress(getPhysicalAddress_cb _hidl_cb) {
}
Return<SendMessageResult> HdmiCec::sendMessage(const CecMessage& message) {
if (message.body.size() > CEC_MESSAGE_BODY_MAX_LENGTH) {
return SendMessageResult::FAIL;
}
cec_message_t legacyMessage {
.initiator = static_cast<cec_logical_address_t>(message.initiator),
.destination = static_cast<cec_logical_address_t>(message.destination),