Modified version of libxaac based on https://github.com/ittiam-systems/libxaac, starting from commit 1f798f1cc5b784fcc5af8777e0c7c2e7da5620db
Sbr frame size is not getting updated in all the sbr decoder calling paths, because of which in one of the paths the number of samples are passed as 0 to sbr decode call. Inside the sbr decode call one of the buffer is accessed with (shifted value of this number of samples - offset), which is becoming negative in this cause. This negative offset is causing OOB read access. Bug:113263695 Test: poc from bug Change-Id: I8fb5391a6ba9dd4919f8b761de295d02dda685b4 |
||
|---|---|---|
| decoder | ||
| test | ||
| Android.bp | ||
| LICENSE | ||
| MODULE_LICENSE_APACHE2 | ||
| NOTICE | ||
| OWNERS | ||