commit 67802977b6f0aa8d6f14f85dadcf32a3cadb9c07
author Andreas Huber <andih@google.com> Wed May 04 11:43:43 2011 -0700
committer Andreas Huber <andih@google.com> Wed May 04 11:43:43 2011 -0700
tree ffa2df57c4ddd67c64244c78e214de97304e48a4
parent 89dc0dffdcbf0999a854a9b1bbea8f56395cc209

Fix potential memory corruption in NuCachedSource2.

Change-Id: Ia6bd2d4966287228a3ac1b067ee1f1ccad965dbb
related-to-bug: 4354845

media/libstagefright/NuCachedSource2.cpp

diff --git a/media/libstagefright/NuCachedSource2.cpp b/media/libstagefright/NuCachedSource2.cpp
index dc86885..81f2e47 100644
--- a/media/libstagefright/NuCachedSource2.cpp
+++ b/media/libstagefright/NuCachedSource2.cpp
@@ -450,6 +450,11 @@
         }
 
         size_t avail = mCache->totalSize() - delta;
+
+        if (avail > size) {
+            avail = size;
+        }
+
         mCache->copy(delta, data, avail);
 
         return avail;