Merge "Fix for OOB write in parametric drc instruction parsing" into pi-dev

am: a97968adcd

Change-Id: I5c65e47d58f764c2707c9ae12a4ac17746f5e67d
This commit is contained in:
Ramesh Katuri 2018-10-02 17:24:42 -07:00 committed by android-build-merger
commit ecb0d6f203

View file

@ -914,6 +914,10 @@ impd_parse_drc_config_ext(ia_bit_buf_struct* it_bit_buff,
str_drc_config_ext->parametric_drc_instructions_count =
impd_read_bits_buf(it_bit_buff, 4);
if (it_bit_buff->error) return it_bit_buff->error;
if (str_drc_config_ext->parametric_drc_instructions_count >
PARAM_DRC_INSTRUCTIONS_COUNT_MAX)
return (UNEXPECTED_ERROR);
for (i = 0; i < str_drc_config_ext->parametric_drc_instructions_count;
i++) {
err = impd_parse_parametric_drc_instructions(