From 1908d2406644ca818318a82b7536a7550bd8c3e7 Mon Sep 17 00:00:00 2001
From: Tripti Tiwari <tripti.tiwari@ittiam.com>
Date: Fri, 7 Dec 2018 17:20:18 +0530
Subject: [PATCH] Fix for integer overflow in ixheaacd_voronoi_search

Subtraction overflow occurs in ixheaacd_voronoi_search.
As fix, saturation check added.

Bug:120064853
Test: vendor
Change-Id: If8c6c21c4d77d2c60e34db6296e500e448c3ed8b
---
 decoder/ixheaacd_avq_dec.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/decoder/ixheaacd_avq_dec.c b/decoder/ixheaacd_avq_dec.c
index d848899..07a0b04 100644
--- a/decoder/ixheaacd_avq_dec.c
+++ b/decoder/ixheaacd_avq_dec.c
@@ -111,7 +111,7 @@ VOID ixheaacd_voronoi_search(WORD32 x[], WORD32 y[], WORD32 count, WORD32 *rem1,
         x1[i] = x[i] - 1;
       } else {
         x1[i] = 0;
-        rem2[i] = rem2[i] - (1 << count);
+        rem2[i] = ixheaacd_sub32_sat(rem2[i], (1 << count));
       }
     } else {
       x1[i] = x[i] - 1;