Commit graph

20 commits

Author SHA1 Message Date
Shashank Pathmudi
b1a57e38c1 Fix for Null-dereference READ in ixheaacd_local_hybcmdct2qmf
Significance:
============
This change addresses invalid residual frame parameters by ensuring valid value combinations based on the number of time slots as per standard specification.

Bug: ossFuzz: 504009345
Test: poc in bug
2026-04-21 14:35:52 +05:30
Shashank Pathmudi
bd6a8bbbfb Fix for integer-overflow in ixheaacd_map_index_data
Some checks failed
CMake / build (push) Has been cancelled
Significance:
============
This change addresses a corner case arithmetic operation involving addition.

Bug: ossFuzz: 486993297
Test: poc in bug
2026-02-24 15:10:53 +05:30
Shashank Pathmudi
f1d0152aae Fix for integer-overflow in ixheaacd_map_index_data
Some checks failed
CMake / build (push) Has been cancelled
Significance:
============
This change addresses a corner case arithmetic operations involving addition, subtraction and multiplication.

Bug: ossFuzz: 476187661
Test: poc in bug
2026-01-19 15:37:28 +05:30
Shashank Pathmudi
6f6dad06a1 Fix for integer-overflow in ixheaacd_map_index_data
Significance:
============
This change addresses a corner case arithmetic operations involving addition.

Bug: ossFuzz: 471768166
Test: poc in bug
2026-01-13 20:42:44 +05:30
Sandesh Venkatesh
a8e8bd5be3 Fix for the integer-overflow in ixheaacd_calculate_ttt, ixheaacd_factor_funct, ixheaacd_mps_apply_m1, ixheaacd_extract_bb_env and ixheaacd_mdct2qmf_process
Significance:
=============
This change addresses corner case arithmetic operation involving multiplication, subtraction and addition.

Bug: ossFuzz: 457106695
Test: poc in bug
2025-11-18 12:37:10 +05:30
Akshay Ragir
b126b7a9af Handled error propagation in ixheaacd_map_index_data
Significance:
=============
- These changes handles the error propagation in ixheaacd_map_index_data

Bug: ossFuzz: Issue_444547711
Test: poc in bug

Testing:
========
Stream tested: clusterfuzz-testcase-minimized-xaac_dec_fuzzer-4708519338377216
2025-10-31 16:37:03 +05:30
Sandesh Venkatesh
953839a61f Fix for the integer-overflow in ixheaacd_factor_cld
Significance:
=============
This change addresses a corner case arithmetic operation involving multiplication.

Bug: ossFuzz: 444547721
Test: poc in bug

Testing:
========
- Conformance tested for x86, x86_64, armv7, armv8, Mac and MSVS
2025-10-31 11:14:35 +05:30
ShashankPathmudi
d880b2f9ee
Decoder Enhancements (#82)
Significance:
========
[x] Aligned buffer access for scratch memory and scratch memory optimization.

Testing:
=====
[x] MSVS Conformance and CTS are passing.
[x] All previous fuzzer crashes are tested. No crash observed.
[x] For platforms, Conformance tested with different combinations.
[x] Tested Conformance with gcc builds for x86, x86_64, armv7 and armv8.
[x] Tested Conformance with clang builds with address and memory sanitizer flags for x86_64 and armv8.
2024-03-29 09:49:01 +05:30
ShashankPathmudi
59ab6ada33
Fix for global buffer overflow in MPS module (#74) 2023-12-29 17:16:17 +05:30
Shashank Pathmudi
60b6534581 Fix for index-out-of-bounds in ixheaacd_smooth_m1m2
These changes handle the index-out-of-bounds runtime error reported
when the value of arbitrary downmix residual bands is greater than or equal
to the number of parameter bands.

Bug: ossFuzz:63564
Test: poc in bug
2023-10-26 10:17:24 +05:30
Shashank Pathmudi
3c8329953c Fix for index-out-of-bounds in ixheaacd_res_ctns_apply
These changes handle the index-out-of-bounds runtime error
reported when the value of residual sampling frequency index
is greater than max residual sampling frequency index.

Bug: ossFuzz:62707
Test: poc in bug
2023-09-29 18:08:43 +05:30
Yash Patil
8da251033e Fix for Index-out-of_bound in ixheaacd_parse_extension_frame
These changes handle Index-out-of_bound runtime error
reported when the value of param bands is greater
than max param bands. This is resolved by adding
condition check to see if the value is greater than supported value.

Bug: ossFuzz:62274
Test: poc in bug
2023-09-15 19:17:37 +05:30
Yash Patil
3479c64b90 Fix for Global-buffer-overflow READ 2 in ixheaacd_res_ctns_apply
These changes handle the Global-buffer-overflow
runtime error reported because tns data filter was getting initialised
inappropriately and was returning an error which was not propagated up.

Bug: ossFuzz:61816
Test: poc in bug
2023-09-01 16:38:08 +05:30
Yash Patil
89310eebc8 Fix for index out of bounds in ixheaacd_calc_m1m2_7272
These changes handle the Index-out-of-bounds
runtime error reported when there is invalid access for some buffers.
It is prevented by propagating error appropriately.

Bug: ossFuzz:61789
Test: poc in bug
2023-09-01 16:38:08 +05:30
Nikhil Bhavikatti
2a43ff9ac7 ESBR command line switch support for xHEAAC decoder 2023-05-17 11:27:24 +05:30
Nikhil Bhavikatti
ae104f0711 Restructuring of Decoder 2023-05-15 17:23:01 +05:30
Nikhil Bhavikatti
18930ce001 Fix for OOB issue in MPS module 2023-04-26 09:37:56 +05:30
Shashank Pathmudi
6ce7dc469c Error concealment support for xHEAAC decoder 2023-02-28 11:54:07 +05:30
Nikhil Bhavikatti
e9a09b4dd0 Fix for stack buffer overflow in MPS module 2023-02-15 13:37:53 +05:30
Shashank Pathmudi
b9e8ada604 MPS support for xHEAAC decoder 2023-01-23 14:46:59 +05:30