libxaac/decoder
Tripti Tiwari 3bb1d13705 Fix for heap-buffer-overflow in ixheaacd_read_bits_buf.
During bitbuffer search for sync word, the buffer is incremented each
time in the loop. However, in the second initialization, this size
is not taken care of.
As a fix, reduced the size appropriately in the second init.

Bug:145727847
Test:poc in bug

Change-Id: Id1079d2feeba6841675562e0e1f7b7983acd1b35
2020-01-11 17:27:28 -08:00
..
armv7 Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
armv8 Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
drc_src Merge "Fix to add few bound checks in DRC, based on code review" 2019-11-14 01:43:53 +00:00
generic Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
x86 Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
x86_64 Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_aac_config.h Fixes to incorporate latest conformance criteria 2019-07-03 10:23:20 -07:00
ixheaacd_aac_imdct.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_aac_imdct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_aac_rom.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_aac_rom.h Fix for array bound overflows 2019-01-11 14:16:39 -08:00
ixheaacd_aac_tns.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_aacdec.h Initialize all allocated memory blocks to zero 2019-03-27 15:49:39 -07:00
ixheaacd_aacdecoder.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_aacpluscheck.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_acelp_bitparse.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_acelp_com.h Fix to define all tables as const in libxaac 2019-07-17 12:24:16 -07:00
ixheaacd_acelp_decode.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_acelp_info.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_mdct.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_acelp_tools.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_adts.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_adts_crc_check.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_adts_crc_check.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_api.c Fix for non-handling of fatal error returned during init. 2019-10-12 16:28:30 -07:00
ixheaacd_api_defs.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_apicmd_standards.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_arith_dec.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_arith_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_audioobjtypes.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_avq_dec.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_avq_rom.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_basic_funcs.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_basic_funcs.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_op.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_basic_ops.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops16.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops32.h Merge "Fix integer overflows in ixheaacd_harm_idx_zerotwo and ixheaacd_harm_idx_onethree" 2019-03-08 19:31:46 +00:00
ixheaacd_basic_ops40.h Use saturating arithmetic in rotated_gosset_mtx_dec 2018-11-13 15:58:59 -08:00
ixheaacd_basic_ops_arr.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_bit_extract.h Fix for un-initialized value in ixheaacd_acelp_alias_cnx 2018-11-25 15:50:42 -08:00
ixheaacd_bitbuffer.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_bitbuffer.h Fix for heap-buffer-overflow in ixheaacd_aac_showbits_32 2019-02-22 18:28:54 -08:00
ixheaacd_block.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_block.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_channel.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_channel.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_channelinfo.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_cnst.h Fix for out of bound write memory access in xheaac 2018-09-10 23:19:24 +00:00
ixheaacd_common_initfuncs.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_common_lpfuncs.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_common_rom.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_common_rom.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_config.h Fixes to incorporate latest conformance criteria 2019-07-03 10:23:20 -07:00
ixheaacd_constants.h Fix for integer overflow in imdct related functions 2019-07-16 15:09:51 -07:00
ixheaacd_create.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_create.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_dec_main.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_decode_main.c Fix for array out of bound in api file 2019-11-07 14:32:42 -08:00
ixheaacd_defines.h Fix for integer overflow in ixheaacd_decode_init() 2019-01-08 11:05:48 -08:00
ixheaacd_definitions.h Fix for heap-buffer-overflow in ixheaacd_samples_sat 2019-07-31 14:04:45 -07:00
ixheaacd_drc_data_struct.h Fix for array out of bound access in aac decoding 2019-04-04 21:16:35 +00:00
ixheaacd_drc_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_drc_freq_dec.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_dsp_fft32x32s.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_dsp_fft32x32s.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_env_calc.c Fix for array out of bound access in envelop calc func. 2019-11-02 09:21:04 -07:00
ixheaacd_env_calc.h Fix for array out of bound access in envelop calc func. 2019-11-02 09:21:04 -07:00
ixheaacd_env_dec.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_env_dec.h Fix for array bound overflows 2019-01-11 14:16:39 -08:00
ixheaacd_env_extr.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_env_extr.h Fix for array out of bound esbr_envcalc file. 2020-01-09 14:24:30 -08:00
ixheaacd_env_extr_part.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_error_codes.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_error_handler.h Fix for global buffer overflow in error handler function 2019-07-23 14:59:21 -07:00
ixheaacd_error_standards.h Fix for heap buffer overflow in aac showbit_32 function 2018-09-12 13:35:01 -07:00
ixheaacd_esbr_envcal.c Fix for array out of bound esbr_envcalc file. 2020-01-09 14:24:30 -08:00
ixheaacd_esbr_fft.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_esbr_polyphase.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_esbr_rom.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_esbr_rom.h Fix to define all tables as const in libxaac 2019-07-17 12:24:16 -07:00
ixheaacd_ext_ch_ele.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_fft.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_freq_sca.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_freq_sca.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_func_def.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_function_selector.h Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_fwd_alias_cnx.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_hbe_trans.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_hcr.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_headerdecode.c Fix for heap-buffer-overflow in ixheaacd_read_bits_buf. 2020-01-11 17:27:28 -08:00
ixheaacd_headerdecode.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_huff_code_reorder.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_huff_tools.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_hufftables.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_hybrid.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_hybrid.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_imdct.c Merge "Fix for unitialized memory access at ixheaacd_add32_sat3" 2019-08-27 22:05:45 +00:00
ixheaacd_info.h Fix to define all tables as const in libxaac 2019-07-17 12:24:16 -07:00
ixheaacd_init_config.c Merge "Adding bound checks in USAC config bit stream parsing" 2019-08-27 20:13:53 +00:00
ixheaacd_initfuncs.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_interface.h Fix to define all tables as const in libxaac 2019-07-17 12:24:16 -07:00
ixheaacd_intrinsics.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_latmdemux.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_latmdemux.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_longblock.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_lpc.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_lpc_dec.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_lpfuncs.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_lpp_tran.c Fix for int-oveflow in ixheaacd_sub32 2020-01-07 15:24:37 -08:00
ixheaacd_lpp_tran.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_lt_predict.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_lt_predict.h Fix for global buffer overflow in lt prediction function. 2018-11-18 11:04:35 -08:00
ixheaacd_main.h Fix for global buffer overflow in ixheaacd_tns_apply 2018-10-22 18:45:39 -07:00
ixheaacd_memory_standards.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_mps_dec.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_mps_dec.h Fix to define all tables as const in libxaac 2019-07-17 12:24:16 -07:00
ixheaacd_mps_decor.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_decorr.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_mps_huff_tab.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_hybfilter.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_hybrid_filt.c Merge "Fix for signed integer overflow at ixheaacd_mps_hyb_filt_type1" 2019-08-26 22:46:32 +00:00
ixheaacd_mps_interface.h Fix for Segmentation fault in ixheaacd_mps_apply_pre_matrix 2018-10-30 14:56:10 -07:00
ixheaacd_mps_nlc_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_parse.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_mps_poly_filt.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_mps_polyphase.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_pre_mix.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_mps_process.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_rom.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_mps_smoothing.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_mps_temp_process.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_mps_temp_reshape.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_multichannel.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_multichannel.h Fix for array out of bound access in multichannel.c file 2019-03-01 17:56:08 -08:00
ixheaacd_pns.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pns_js_thumb.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_pred_vec_block.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_process.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_process.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ps_bitdec.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_ps_bitdec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ps_dec.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_ps_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pulsedata.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pvc_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pvc_rom.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_pvc_rom.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_qmf_dec.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_qmf_dec.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_qmf_poly.h Fix for stack corruption in esbr 2018-07-12 23:36:28 +00:00
ixheaacd_rev_vlc.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_rom.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_rvlc.h Fix for heap buffer overflow in huff code reorder 2018-09-18 13:05:13 -07:00
ixheaacd_sbr_common.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_const.h Fixes to incorporate latest conformance criteria 2019-07-03 10:23:20 -07:00
ixheaacd_sbr_crc.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_sbr_crc.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_dec.c Fix for array out of bound access in envelop calc func. 2019-11-02 09:21:04 -07:00
ixheaacd_sbr_dec.h Merge "Fix for few uninitialized accesses" 2019-01-07 19:32:27 +00:00
ixheaacd_sbr_payload.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_rom.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_sbr_rom.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_scale.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbrdec_initfuncs.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_sbrdec_lpfuncs.c Fix to handle infinite loop in reset hf generator function 2019-10-21 10:11:26 -07:00
ixheaacd_sbrdecoder.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_sbrdecoder.h Fix for array bound overflows 2019-01-11 14:16:39 -08:00
ixheaacd_sbrdecsettings.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbrqmftrans.h Fix for OOB write in ixheaacd_real_synth_filt. 2019-02-22 18:51:11 -08:00
ixheaacd_spectrum_dec.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_stereo.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_stereo.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_struct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_struct_def.h Fix for stack buffer overflow in ixheaacd_esbr_chirp_fac_calc. 2019-06-11 15:29:57 -07:00
ixheaacd_tcx_fwd_alcnx.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_tcx_fwd_mdct.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_td_mdct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_thumb_ps_dec.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_tns.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_tns.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_tns_usac.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_type_def.h Fix for heap buffer overflow in aac showbit_32 function 2018-09-12 13:35:01 -07:00
ixheaacd_vec_baisc_ops.h Fixes to incorporate latest conformance criteria 2019-07-03 10:23:20 -07:00
ixheaacd_ver_number.h Collected Cleanups from Ittiam 2018-06-05 13:04:22 -07:00
ixheaacd_Windowing.c Fix for correcting #include delimiters 2019-08-26 13:35:44 -07:00
ixheaacd_windows.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00