diff options
| -rw-r--r-- | media/jni/android_media_MediaCodec.cpp | 4 | 
1 files changed, 4 insertions, 0 deletions
diff --git a/media/jni/android_media_MediaCodec.cpp b/media/jni/android_media_MediaCodec.cpp index 8396005b1b63..e32556247e0d 100644 --- a/media/jni/android_media_MediaCodec.cpp +++ b/media/jni/android_media_MediaCodec.cpp @@ -2895,6 +2895,10 @@ static void extractBufferFromContext(          jint offset,          jint size,          std::shared_ptr<C2Buffer> *buffer) { +    if ((offset + size) > context->capacity()) { +        ALOGW("extractBufferFromContext: offset + size provided exceed capacity"); +        return; +    }      *buffer = context->toC2Buffer(offset, size);      if (*buffer == nullptr) {          if (!context->mMemory) {  |