wrapper/libxaac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix for Null-dereference read in ixheaacd_init_sbr

Browse source 
Header decode is done with AOT 2 (AAC-LC profile),
but due to corrupted nature of input file AOT is read
as 42 (USAC profile) after few memory/table initializations.

As fix, modified the check to prevent an attempt
to change AOT in mid file.

Bug: 160389683
Test: poc in bug

Change-Id: Id95aa74b0833321b29b602d97b14c5a5580ef7fc
This commit is contained in:
Rajat Kumar 2020-07-07 15:36:05 +05:30 • committed by rajat.kumar@ittiam.com
parent bcbd383251
commit a741e1d5de
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
decoder/ixheaacd_headerdecode.c
View file

@ -546,7 +546,7 @@ WORD32 ixheaacd_ga_hdr_dec(ia_aac_dec_state_struct *aac_state_struct,
ixheaacd_read_bits_buf(it_bit_buff, 5);
}
if (aac_state_struct->ui_init_done) {
if (aac_state_struct->header_dec_done) {
if (aac_state_struct->audio_object_type != aot_init) return IA_FATAL_ERROR;
}