wrapper/libxaac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix for OOB loudness eq instruction parsing

Browse source 
Bounds checking on value parsed from input stream.

Bug: 116020594
Test: vendor
Change-Id: I915f36ca27b982c8f1b11a533969e40fbff3b765
(cherry picked from commit cd74db5553)
This commit is contained in:
Ramesh Katuri 2018-09-21 17:58:03 +05:30 • committed by android-build-team Robot
parent dbf5e31aac
commit ed3339bc46
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
decoder/drc_src/impd_drc_dynamic_payload.c
View file

@ -1281,7 +1281,8 @@ WORD32 impd_parse_loud_eq_instructions(
if (additional_eq_set_id_present) {
additional_eq_set_id_cnt = impd_read_bits_buf(it_bit_buff, 6);
if (it_bit_buff->error) return it_bit_buff->error;
if (additional_eq_set_id_cnt >= EQ_SET_ID_COUNT_MAX)
return UNEXPECTED_ERROR;
for (i = 0; i < additional_eq_set_id_cnt; i++) {
loud_eq_instructions->eq_set_id[i + 1] =
impd_read_bits_buf(it_bit_buff, 6);