libxaac/decoder
Ramesh Katuri 69f8d42a89 Fix for stack buffer underflow in sbr
Sbr frame size is not getting updated in all the sbr decoder
calling paths, because of which in one of the paths the number
of samples are passed as 0 to sbr decode call.

Inside the sbr decode call one of the buffer is accessed with
(shifted value of this number of samples - offset),
which is becoming negative in this cause. This negative offset
is causing OOB read access.

Bug:113263695
Test: poc from bug
Change-Id: I8fb5391a6ba9dd4919f8b761de295d02dda685b4
2018-09-04 10:39:04 -07:00
..
armv7 Formatting changes 2018-06-07 16:52:19 -07:00
armv8 Merge changes I345fc5a4,I5495b01d,I4ca17f0c,I24b01b4a,I40f74385, ... 2018-07-13 18:27:40 +00:00
drc_src Changes based on review comments 2018-07-03 11:21:47 -07:00
generic Formatting changes 2018-06-07 16:52:19 -07:00
x86 Formatting changes 2018-06-07 16:52:19 -07:00
x86_64 Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_aac_config.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_aac_imdct.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_aac_imdct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_aac_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_aac_rom.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_aac_tns.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_aacdec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_aacdecoder.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_aacpluscheck.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_bitparse.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_com.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_decode.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_acelp_info.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_mdct.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_tools.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_adts.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_adts_crc_check.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_adts_crc_check.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_api.c Fix for stack buffer underflow in sbr 2018-09-04 10:39:04 -07:00
ixheaacd_api_defs.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_apicmd_standards.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_arith_dec.c Fix for sanitizer multiplication overflow error 2018-07-03 13:57:13 -07:00
ixheaacd_arith_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_audioobjtypes.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_avq_dec.c Fix for sanitizer multiplication overflow error 2018-07-03 13:57:13 -07:00
ixheaacd_avq_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_funcs.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_funcs.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_op.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops16.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops32.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_basic_ops40.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_basic_ops_arr.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_bit_extract.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_bitbuffer.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_bitbuffer.h Collected Cleanups from Ittiam 2018-06-05 13:04:22 -07:00
ixheaacd_block.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_block.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_channel.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_channel.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_channelinfo.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_cnst.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_common_initfuncs.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_common_lpfuncs.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_common_rom.c Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_common_rom.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_config.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_constants.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_create.c Fix for Segmentation fault in ixheaacd_mps_apply_pre_matrix 2018-07-03 13:45:37 -07:00
ixheaacd_create.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_dec_main.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_decode_main.c Fix memory leak in XAAC 2018-07-03 11:21:59 -07:00
ixheaacd_defines.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_definitions.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_drc_data_struct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_drc_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_drc_freq_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_dsp_fft32x32s.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_dsp_fft32x32s.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_env_calc.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_env_calc.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_env_dec.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_env_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_env_extr.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_env_extr.h Collected Cleanups from Ittiam 2018-06-05 13:04:22 -07:00
ixheaacd_env_extr_part.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_error_codes.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_error_handler.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_error_standards.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_esbr_envcal.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_esbr_fft.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_esbr_polyphase.c Fix for stack corruption in esbr 2018-07-10 16:55:00 -07:00
ixheaacd_esbr_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_esbr_rom.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_ext_ch_ele.c Fix for sanitizer multiplication overflow error 2018-07-03 13:57:13 -07:00
ixheaacd_fft.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_freq_sca.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_freq_sca.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_func_def.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_function_selector.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_fwd_alias_cnx.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_hbe_trans.c Fix for stack corruption in esbr 2018-07-10 16:55:00 -07:00
ixheaacd_hcr.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_headerdecode.c Changes based on review comments 2018-07-03 11:21:47 -07:00
ixheaacd_headerdecode.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_huff_code_reorder.c Changes based on review comments 2018-07-03 11:21:47 -07:00
ixheaacd_huff_tools.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_hufftables.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_hybrid.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_hybrid.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_imdct.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_info.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_init_config.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_initfuncs.c Changes based on review comments 2018-07-03 11:21:47 -07:00
ixheaacd_interface.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_intrinsics.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_latmdemux.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_latmdemux.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_longblock.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_lpc.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_lpc_dec.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_lpfuncs.c Fix for ubsan add-overflow 2018-07-03 13:30:00 -07:00
ixheaacd_lpp_tran.c Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_lpp_tran.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_lt_predict.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_lt_predict.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_main.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_memory_standards.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_mps_dec.c Merge "Fix for segmentation fault in ixheaacd_sbr_dec_from_mps" 2018-07-13 20:31:22 +00:00
ixheaacd_mps_dec.h Merge "Fix for segmentation fault in ixheaacd_sbr_dec_from_mps" 2018-07-13 20:31:22 +00:00
ixheaacd_mps_decor.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_decorr.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_huff_tab.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_hybfilter.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_hybrid_filt.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_interface.h Fix for Segmentation fault in ixheaacd_mps_apply_pre_matrix 2018-07-03 13:45:37 -07:00
ixheaacd_mps_nlc_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_parse.c Fix for Segmentation fault in ixheaacd_sbr_dec_from_mps 2018-07-03 14:18:07 -07:00
ixheaacd_mps_poly_filt.c Fix for Segmentation fault in ixheaacd_sbr_dec_from_mps 2018-07-03 14:18:07 -07:00
ixheaacd_mps_polyphase.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_pre_mix.c Merge "Fix for segmentation fault in ixheaacd_sbr_dec_from_mps" 2018-07-13 20:31:22 +00:00
ixheaacd_mps_process.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_smoothing.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_temp_process.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_mps_temp_reshape.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_multichannel.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_multichannel.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pns.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pns_js_thumb.c Fix for ubsan add-overflow 2018-07-03 13:30:00 -07:00
ixheaacd_pred_vec_block.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_process.c Fix for segementation fault in mps_apply function 2018-08-23 16:00:28 -07:00
ixheaacd_process.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ps_bitdec.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ps_bitdec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ps_dec.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ps_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pulsedata.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pvc_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pvc_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pvc_rom.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_qmf_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_qmf_dec.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_qmf_poly.h Fix for stack corruption in esbr 2018-07-10 16:55:00 -07:00
ixheaacd_rev_vlc.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_rvlc.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_sbr_common.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_const.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_crc.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_crc.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_sbr_dec.h Fix for stack corruption in esbr 2018-07-10 16:55:00 -07:00
ixheaacd_sbr_payload.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_rom.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_scale.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbrdec_initfuncs.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_sbrdec_lpfuncs.c Fix for Segmentation fault in esbr co variance calcualtion 2018-07-03 14:26:48 -07:00
ixheaacd_sbrdecoder.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_sbrdecoder.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbrdecsettings.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbrqmftrans.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_spectrum_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_stereo.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_stereo.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_struct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_struct_def.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_tcx_fwd_alcnx.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_tcx_fwd_mdct.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_td_mdct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_thumb_ps_dec.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_tns.c Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_tns.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_tns_usac.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_type_def.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_vec_baisc_ops.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ver_number.h Collected Cleanups from Ittiam 2018-06-05 13:04:22 -07:00
ixheaacd_Windowing.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_windows.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00