wrapper/libxaac-mirror
1
0
Fork 0
mirror of https://github.com/ittiam-systems/libxaac.git synced 2026-07-10 22:35:20 +07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix for array out of bound in api file

Browse source 
Removed the redundant part of code which initilizes
an array with -1 and uses it as index.

Bug:141524696
Test: poc in bug

Change-Id: Ie126ca257dc0f7276c46733b043a84d5a88a062d
This commit is contained in:
Rajat Kumar 2019-09-24 12:21:24 +05:30 • committed by Ray Essick
parent e96e08da90
commit deb3f00a38
1 changed files with 4 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

11
decoder/ixheaacd_decode_main.c
View file

@ -387,7 +387,7 @@ WORD32 ixheaacd_dec_main(VOID *temp_handle, WORD8 *inbuffer, WORD8 *outbuffer,
.str_usac_config.str_usac_dec_config.preroll_counter;
UWORD8 i; // for looping index used for payload calculation
WORD32 payload_buffer_offeset = 0;
WORD32 payload_buffer_offset = 0;
WORD32 copy_bytes =
pstr_dec_data->str_frame_data.str_audio_specific_config
.str_usac_config.str_usac_dec_config
@ -401,7 +401,7 @@ WORD32 ixheaacd_dec_main(VOID *temp_handle, WORD8 *inbuffer, WORD8 *outbuffer,
.usac_ext_gain_payload_len[preroll_counter];
for (i = 0; i < preroll_counter; i++)
payload_buffer_offeset +=
payload_buffer_offset +=
pstr_dec_data->str_frame_data.str_audio_specific_config
.str_usac_config.str_usac_dec_config
.usac_ext_gain_payload_len[i] *
@ -409,11 +409,11 @@ WORD32 ixheaacd_dec_main(VOID *temp_handle, WORD8 *inbuffer, WORD8 *outbuffer,
memcpy(pstr_audio_specific_config->str_usac_config.str_usac_dec_config
.usac_ext_gain_payload_buf +
payload_buffer_offeset,
payload_buffer_offset,
pstr_dec_data->str_frame_data.str_audio_specific_config
.str_usac_config.str_usac_dec_config
.usac_ext_gain_payload_buf +
payload_buffer_offeset,
payload_buffer_offset,
copy_bytes);
pstr_audio_specific_config->str_usac_config.str_usac_dec_config
@ -423,9 +423,6 @@ WORD32 ixheaacd_dec_main(VOID *temp_handle, WORD8 *inbuffer, WORD8 *outbuffer,
if (preroll_counter > (MAX_AUDIO_PREROLLS + 1)) return IA_FATAL_ERROR;
pstr_audio_specific_config->str_usac_config.str_usac_dec_config
.usac_ext_gain_payload_len[preroll_counter] = -1;
pstr_dec_data->str_frame_data.str_audio_specific_config.str_usac_config
.str_usac_dec_config.preroll_counter = preroll_counter;
}