mirror of
https://github.com/Evolution-X/hardware_interfaces
synced 2026-02-02 17:31:58 +00:00
Add necessary methods to protect the framework against crafted buffer handles. Bug: 62535446 Bug: 62084097 Bug: 32587089 Test: manual Change-Id: I11486c0767a90788da9f84c2177202f26c0d9ce1
62 lines
2.7 KiB
Plaintext
62 lines
2.7 KiB
Plaintext
/*
|
|
* Copyright 2017 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
package android.hardware.graphics.mapper@2.1;
|
|
|
|
import android.hardware.graphics.mapper@2.0::Error;
|
|
import android.hardware.graphics.mapper@2.0::IMapper;
|
|
|
|
interface IMapper extends android.hardware.graphics.mapper@2.0::IMapper {
|
|
/**
|
|
* Validate that the buffer can be safely accessed by a caller who assumes
|
|
* the specified descriptorInfo and stride. This must at least validate
|
|
* that the buffer size is large enough. Validating the buffer against
|
|
* individual buffer attributes is optional.
|
|
*
|
|
* @param buffer is the buffer to validate against.
|
|
* @param descriptorInfo specifies the attributes of the buffer.
|
|
* @param stride is the buffer stride returned by IAllocator::allocate.
|
|
* @return error is NONE upon success. Otherwise,
|
|
* BAD_BUFFER when the buffer is invalid.
|
|
* BAD_VALUE when buffer cannot be safely accessed
|
|
*/
|
|
validateBufferSize(pointer buffer,
|
|
BufferDescriptorInfo descriptorInfo,
|
|
uint32_t stride)
|
|
generates (Error error);
|
|
|
|
/**
|
|
* Get the transport size of a buffer. An imported buffer handle is a raw
|
|
* buffer handle with the process-local runtime data appended. This
|
|
* function, for example, allows a caller to omit the process-local
|
|
* runtime data at the tail when serializing the imported buffer handle.
|
|
*
|
|
* Note that a client might or might not omit the process-local runtime
|
|
* data when sending an imported buffer handle. The mapper must support
|
|
* both cases on the receiving end.
|
|
*
|
|
* @param buffer is the buffer to get the transport size from.
|
|
* @return error is NONE upon success. Otherwise,
|
|
* BAD_BUFFER when the buffer is invalid.
|
|
* @return numFds is the number of file descriptors needed for transport.
|
|
* @return numInts is the number of integers needed for transport.
|
|
*/
|
|
getTransportSize(pointer buffer)
|
|
generates (Error error,
|
|
uint32_t numFds,
|
|
uint32_t numInts);
|
|
};
|