wrapper/libxaac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix to handle segv in impd_filter_banks_process

Browse source 
Added check to ensure array size of
buf_interpolation->lpcm_gains does not
exceed allotted size.

Bug: 161819862
Test: poc in bug

Change-Id: I7e554d70ada8d92ee3496c0fbdfc78cee55e4697
This commit is contained in:
Rajat kumar 2020-07-26 17:21:02 +05:30 • committed by rajat.kumar@ittiam.com
parent bcbd383251
commit f2d380ca2e
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
decoder/drc_src/impd_drc_dynamic_payload.c
View file

@ -231,6 +231,8 @@ WORD32 impd_dec_times(ia_bit_buf_struct* it_bit_buff,
}
}
node_time_tmp = time_offs + time_delta * delta_tmin;
if (node_time_tmp >= (2 * AUDIO_CODEC_FRAME_SIZE_MAX - drc_frame_size))
return UNEXPECTED_ERROR;
if (node_time_tmp > drc_frame_size + time_offset) {
if (node_res_flag == 0) {
str_node[k].time = drc_frame_size + time_offset;