diff options
| author | Sangchul Lee <sc11.lee@samsung.com> | 2016-07-04 20:53:27 +0900 |
|---|---|---|
| committer | Sangchul Lee <sc11.lee@samsung.com> | 2016-07-04 20:54:37 +0900 |
| commit | c774982fd8d8002f9908e148a84d92ddef02e46f (patch) | |
| tree | 3938b1474530bbe0c782ca3dd41beb5b4c546ee3 | |
| parent | 38c55251b66cd301fb37030b2d2f388e4d1c3d9f (diff) | |
| download | audio-hal-sc7727-c774982fd8d8002f9908e148a84d92ddef02e46f.tar.gz audio-hal-sc7727-c774982fd8d8002f9908e148a84d92ddef02e46f.tar.bz2 audio-hal-sc7727-c774982fd8d8002f9908e148a84d92ddef02e46f.zip | |
Fix SVACE defects: add checking higher boundsubmit/tizen/20160705.084920accepted/tizen/mobile/20160706.013641
[Version] 0.1.16
[Profile] Mobile
[Issue Type] Bug Fix
Change-Id: I691a224f0a6cbc2516ece540e51d8bdc3144dae5
Signed-off-by: Sangchul Lee <sc11.lee@samsung.com>
| -rw-r--r-- | packaging/audio-hal-sc7727.spec | 2 | ||||
| -rw-r--r-- | tizen-audio-volume.c | 7 |
2 files changed, 5 insertions, 4 deletions
diff --git a/packaging/audio-hal-sc7727.spec b/packaging/audio-hal-sc7727.spec index c651260..cf665c1 100644 --- a/packaging/audio-hal-sc7727.spec +++ b/packaging/audio-hal-sc7727.spec @@ -1,6 +1,6 @@ Name: audio-hal-sc7727 Summary: TIZEN Audio HAL for SC7727 -Version: 0.1.15 +Version: 0.1.16 Release: 0 Group: System/Libraries License: Apache-2.0 diff --git a/tizen-audio-volume.c b/tizen-audio-volume.c index da10975..f607718 100644 --- a/tizen-audio-volume.c +++ b/tizen-audio-volume.c @@ -40,6 +40,7 @@ #define RADIO_TUNING_ENABLE "tuning:enable" #define RADIO_TUNING_VOLUME_LEVELS "fmradio:volume_levels" #define RADIO_TUNING_VOLUME_TABLE "fmradio:volume_table" +#define RADIO_VOLUME_NUM_MAX 100 static const char *g_volume_vconf[AUDIO_VOLUME_TYPE_MAX] = { "file/private/sound/volume/system", /* AUDIO_VOLUME_TYPE_SYSTEM */ @@ -310,15 +311,15 @@ static audio_return_t __load_radio_volume_table(int** volume_table, int *number_ } *number_of_elements = iniparser_getint(dict, RADIO_TUNING_VOLUME_LEVELS, -1); - if (*number_of_elements <= 0) { + if (*number_of_elements <= 0 || *number_of_elements > RADIO_VOLUME_NUM_MAX) { AUDIO_LOG_ERROR("invalid number of elements, %d", *number_of_elements); ret = AUDIO_ERR_INTERNAL; goto error; } temp_table = (int *)malloc((*number_of_elements) * sizeof(int)); - if (!temp_table) { + if (!temp_table) goto error; - } + *volume_table = temp_table; list_str = iniparser_getstring(dict, RADIO_TUNING_VOLUME_TABLE, NULL); |