Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

camera2: limit flexYUV array size in DngCreator

Browse Source 
corrected overread

Bug: 19211135
Change-Id: I373b84dd9e2dc6219a305bf2d0308119668fab2a
This commit is contained in:
Lajos Molnar
2015-02-03 14:55:21 -08:00
parent 39ae0547ca
commit fdb2112bbc
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
core/java/android/hardware/camera2/DngCreator.java
View File

@@ -530,9 +530,9 @@ public final class DngCreator implements AutoCloseable {
int uPixStride = uPlane.getPixelStride();
byte[] yuvPixel = { 0, 0, 0 };
byte[] yFullRow = new byte[yPixStride * width];
byte[] uFullRow = new byte[uPixStride * width / 2];
byte[] vFullRow = new byte[vPixStride * width / 2];
byte[] yFullRow = new byte[yPixStride * (width - 1) + 1];
byte[] uFullRow = new byte[uPixStride * (width / 2 - 1) + 1];
byte[] vFullRow = new byte[vPixStride * (width / 2 - 1) + 1];
byte[] finalRow = new byte[BYTES_PER_RGB_PIX * width];
for (int i = 0; i < height; i++) {
int halfH = i / 2;