libxaac/decoder
Ramesh Katuri 171b2f9d33 Fix for heap buffer overflow in xaac decoder init
Number of elements allowed in usac profile are 16. Erroneous input
stream in this use case has 63336 elements.We have an error
check for this max number of elements while parsing the decoder
configuration.This returned error code was not handled properly.

Maximum 16 config elements can be used while codec creation,because
of number of elements values is coming as 63336, during
creation time OOB read is happening.

Bug:112766520
Bug:112857468
Bug:112913145
Bug:112918261
Test: re-ran poc
Change-Id: If9413546371f72a6896f5c7e7d22a314e484cf76
(cherry picked from commit 4878ef09c7)
2018-09-10 23:19:28 +00:00
..
armv7 Formatting changes 2018-06-07 16:52:19 -07:00
armv8 Fix for stack corruption in esbr 2018-07-12 23:36:28 +00:00
drc_src Formatting changes 2018-06-07 16:52:19 -07:00
generic Formatting changes 2018-06-07 16:52:19 -07:00
x86 Formatting changes 2018-06-07 16:52:19 -07:00
x86_64 Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_aac_config.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_aac_imdct.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_aac_imdct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_aac_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_aac_rom.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_aac_tns.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_aacdec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_aacdecoder.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_aacpluscheck.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_bitparse.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_com.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_decode.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_acelp_info.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_mdct.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_tools.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_adts.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_adts_crc_check.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_adts_crc_check.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_api.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_api_defs.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_apicmd_standards.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_arith_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_arith_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_audioobjtypes.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_avq_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_avq_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_funcs.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_funcs.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_op.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops16.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops32.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_basic_ops40.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_basic_ops_arr.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_bit_extract.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_bitbuffer.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_bitbuffer.h Collected Cleanups from Ittiam 2018-06-05 13:04:22 -07:00
ixheaacd_block.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_block.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_channel.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_channel.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_channelinfo.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_cnst.h Fix for out of bound write memory access in xheaac 2018-09-10 23:19:24 +00:00
ixheaacd_common_initfuncs.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_common_lpfuncs.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_common_rom.c Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_common_rom.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_config.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_constants.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_create.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_create.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_dec_main.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_decode_main.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_defines.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_definitions.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_drc_data_struct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_drc_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_drc_freq_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_dsp_fft32x32s.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_dsp_fft32x32s.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_env_calc.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_env_calc.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_env_dec.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_env_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_env_extr.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_env_extr.h Collected Cleanups from Ittiam 2018-06-05 13:04:22 -07:00
ixheaacd_env_extr_part.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_error_codes.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_error_handler.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_error_standards.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_esbr_envcal.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_esbr_fft.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_esbr_polyphase.c Fix for stack corruption in esbr 2018-07-12 23:36:28 +00:00
ixheaacd_esbr_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_esbr_rom.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_ext_ch_ele.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_fft.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_freq_sca.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_freq_sca.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_func_def.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_function_selector.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_fwd_alias_cnx.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_hbe_trans.c Fix for stack corruption in esbr 2018-07-12 23:36:28 +00:00
ixheaacd_hcr.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_headerdecode.c Fix for heap buffer overflow in xaac decoder init 2018-09-10 23:19:28 +00:00
ixheaacd_headerdecode.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_huff_code_reorder.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_huff_tools.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_hufftables.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_hybrid.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_hybrid.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_imdct.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_info.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_init_config.c Fix for heap buffer overflow in xaac decoder init 2018-09-10 23:19:28 +00:00
ixheaacd_initfuncs.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_interface.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_intrinsics.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_latmdemux.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_latmdemux.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_longblock.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_lpc.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_lpc_dec.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_lpfuncs.c Fix for ubsan add-overflow 2018-07-27 22:23:11 +00:00
ixheaacd_lpp_tran.c Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_lpp_tran.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_lt_predict.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_lt_predict.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_main.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_memory_standards.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_mps_dec.c DO NOT MERGE Fix for stack-buffer-overflow in mps module 2018-09-10 23:19:26 +00:00
ixheaacd_mps_dec.h DO NOT MERGE Fix for stack-buffer-overflow in mps module 2018-09-10 23:19:26 +00:00
ixheaacd_mps_decor.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_decorr.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_huff_tab.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_hybfilter.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_hybrid_filt.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_interface.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_mps_nlc_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_parse.c Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_mps_poly_filt.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_polyphase.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_pre_mix.c DO NOT MERGE Fix for stack-buffer-overflow in mps module 2018-09-10 23:19:26 +00:00
ixheaacd_mps_process.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_smoothing.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_temp_process.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_mps_temp_reshape.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_multichannel.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_multichannel.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pns.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pns_js_thumb.c Fix for ubsan add-overflow 2018-07-27 22:23:11 +00:00
ixheaacd_pred_vec_block.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_process.c Fix for out of bound write memory access in xheaac 2018-09-10 23:19:24 +00:00
ixheaacd_process.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ps_bitdec.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ps_bitdec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ps_dec.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ps_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pulsedata.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pvc_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pvc_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pvc_rom.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_qmf_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_qmf_dec.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_qmf_poly.h Fix for stack corruption in esbr 2018-07-12 23:36:28 +00:00
ixheaacd_rev_vlc.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_rvlc.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_sbr_common.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_const.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_crc.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_crc.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_sbr_dec.h Fix for stack corruption in esbr 2018-07-12 23:36:28 +00:00
ixheaacd_sbr_payload.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_rom.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_scale.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbrdec_initfuncs.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_sbrdec_lpfuncs.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_sbrdecoder.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_sbrdecoder.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbrdecsettings.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbrqmftrans.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_spectrum_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_stereo.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_stereo.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_struct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_struct_def.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_tcx_fwd_alcnx.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_tcx_fwd_mdct.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_td_mdct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_thumb_ps_dec.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_tns.c Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_tns.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_tns_usac.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_type_def.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_vec_baisc_ops.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ver_number.h Collected Cleanups from Ittiam 2018-06-05 13:04:22 -07:00
ixheaacd_Windowing.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_windows.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00