wrapper/libxaac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix for the Heap-buffer-overflow in ixheaace_process

Browse source 
This change handles the Heap-buffer-overflow by
considering the bits used by the SBR encoder for
USAC mono streams.

Bug: ossFuzz:61825
Test: poc in bug
This commit is contained in:
Shreyas Talwekar 2023-08-30 19:33:21 +05:30 • committed by Divya B M
parent 5285d1921d
commit cd91e1af76
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
encoder/ixheaace_api.c
View file

@ -3079,7 +3079,8 @@ static IA_ERRORCODE iusace_process(ixheaace_api_struct *pstr_api_struct) {
&(pstr_api_struct->pstr_state->num_anc_data_bytes[0][0]),
pstr_api_struct->pstr_state->anc_data_bytes[0],
&(pstr_api_struct->spectral_band_replication_tabs), &(pstr_api_struct->common_tabs),
&(mps_extension_payload.p_data[0]), mps_extension_payload.data_size, 0, NULL);
&(mps_extension_payload.p_data[0]), mps_extension_payload.data_size, 0,
&pstr_api_struct->pstr_state->str_usac_enc_data.num_sbr_bits);
if (error != IA_NO_ERROR) {
return error;
}