Because of a design bug in IOMX, the user-supplied sizes in the GET_PARAMETER and SET_PARAMETER calls ar e discarded before calling in to the responsible OMX code-paths. This has led to a variety of overflow-type bugs.
245303f62a985e2c7f94eea5fb4db0d07c7e4c06a7618c0e4bce59602d707a4c