libxaac/decoder
Ramesh Katuri 97fb283165 Fix for oobw in ixheaacd_decode_init()
seed_value[] is an array of size MAX_NUM_CHANNELS which is 6.
seed_value is accessed using number of channels in the stream.
For the given input number of channels are more than six,which
is causing OOB write.

As fix, check has been added based on number of channels.As
we support only stereo in USAC, we are returning error if
stream contains more than 2 channels.

Bug:119118558
Test: vendor
Change-Id: I3187b0eae0f802ddb82cdc07a9eec1b5910607b4
2018-11-29 16:30:14 -08:00
..
armv7 Formatting changes 2018-06-07 16:52:19 -07:00
armv8 Merge changes I345fc5a4,I5495b01d,I4ca17f0c,I24b01b4a,I40f74385, ... 2018-07-13 18:27:40 +00:00
drc_src Fix for oobw-in-impd_parse_drc_instructions_uni_drc am: 4692bee50b 2018-11-27 17:31:41 -08:00
generic Formatting changes 2018-06-07 16:52:19 -07:00
x86 Formatting changes 2018-06-07 16:52:19 -07:00
x86_64 Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_aac_config.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_aac_imdct.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_aac_imdct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_aac_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_aac_rom.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_aac_tns.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_aacdec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_aacdecoder.c Fix for crc related issues 2018-09-06 18:32:13 +00:00
ixheaacd_aacpluscheck.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_bitparse.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_com.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_decode.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_acelp_info.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_mdct.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_acelp_tools.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_adts.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_adts_crc_check.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_adts_crc_check.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_api.c Fix to handle multiple CSD's in a stream 2018-10-04 16:19:55 -07:00
ixheaacd_api_defs.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_apicmd_standards.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_arith_dec.c Clean an array bounds violation. 2018-10-30 14:56:10 -07:00
ixheaacd_arith_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_audioobjtypes.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_avq_dec.c Fix for sanitizer multiplication overflow error 2018-10-30 14:56:10 -07:00
ixheaacd_avq_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_funcs.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_funcs.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_op.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops16.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_basic_ops32.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_basic_ops40.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_basic_ops_arr.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_bit_extract.h Fix for un-initialized value in ixheaacd_acelp_alias_cnx 2018-11-25 15:50:42 -08:00
ixheaacd_bitbuffer.c Fix for heap buffer overflow in huff code reorder 2018-09-18 13:05:13 -07:00
ixheaacd_bitbuffer.h Fix for heap buffer overflow in huff code reorder 2018-09-18 13:05:13 -07:00
ixheaacd_block.c Fix for heap buffer overflow in huff code reorder 2018-09-18 13:05:13 -07:00
ixheaacd_block.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_channel.c Fix for global buffer overflow in lt prediction function. 2018-11-18 11:04:35 -08:00
ixheaacd_channel.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_channelinfo.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_cnst.h Fix for out of bound write memory access in xheaac 2018-08-30 17:02:10 -07:00
ixheaacd_common_initfuncs.c Fix for segmentation fault in header initialization 2018-09-04 11:55:48 -07:00
ixheaacd_common_lpfuncs.c Fix for heap buffer overflow in showbits_7 function 2018-11-25 16:34:14 -08:00
ixheaacd_common_rom.c Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_common_rom.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_config.h Fix for oobw in ixheaacd_decode_init() 2018-11-29 16:30:14 -08:00
ixheaacd_constants.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_create.c Fix for oobw in ixheaacd_decode_init() 2018-11-29 16:30:14 -08:00
ixheaacd_create.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_dec_main.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_decode_main.c Fix memory leak in XAAC 2018-07-03 11:21:59 -07:00
ixheaacd_defines.h Fix for heap buffer overflow in read section data 2018-10-03 16:54:46 -07:00
ixheaacd_definitions.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_drc_data_struct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_drc_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_drc_freq_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_dsp_fft32x32s.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_dsp_fft32x32s.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_env_calc.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_env_calc.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_env_dec.c Fix for segmentation fault in hf generator 2018-11-02 22:53:22 +00:00
ixheaacd_env_dec.h Fix for segmentation fault in hf generator 2018-11-02 22:53:22 +00:00
ixheaacd_env_extr.c Fix for global buffer overflow in scale factor processing 2018-09-06 11:08:38 -07:00
ixheaacd_env_extr.h Collected Cleanups from Ittiam 2018-06-05 13:04:22 -07:00
ixheaacd_env_extr_part.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_error_codes.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_error_handler.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_error_standards.h Fix for heap buffer overflow in aac showbit_32 function 2018-09-12 13:35:01 -07:00
ixheaacd_esbr_envcal.c Fix for stack-buffer-underflow in ixheaacd_sbr_env_calc 2018-11-14 18:31:32 -08:00
ixheaacd_esbr_fft.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_esbr_polyphase.c Fix for stack corruption in esbr 2018-07-12 23:36:28 +00:00
ixheaacd_esbr_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_esbr_rom.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_ext_ch_ele.c Fix for un-initialized value in ixheaacd_acelp_alias_cnx 2018-11-25 15:50:42 -08:00
ixheaacd_fft.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_freq_sca.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_freq_sca.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_func_def.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_function_selector.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_fwd_alias_cnx.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_hbe_trans.c Fix for stack corruption in esbr 2018-07-12 23:36:28 +00:00
ixheaacd_hcr.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_headerdecode.c Fix for heap buffer overflow in dec data init function 2018-11-25 15:36:26 -08:00
ixheaacd_headerdecode.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_huff_code_reorder.c Fix for heap buffer overflow in huff code reorder 2018-09-18 13:05:13 -07:00
ixheaacd_huff_tools.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_hufftables.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_hybrid.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_hybrid.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_imdct.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_info.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_init_config.c Fix for oobw in ixheaacd_decode_init() 2018-11-29 16:30:14 -08:00
ixheaacd_initfuncs.c Changes based on review comments 2018-07-03 11:21:47 -07:00
ixheaacd_interface.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_intrinsics.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_latmdemux.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_latmdemux.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_longblock.c Fix for heap buffer overflow in read section data 2018-10-03 16:54:46 -07:00
ixheaacd_lpc.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_lpc_dec.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_lpfuncs.c Fix for crash in ixheaacd_lt_prediction 2018-11-23 15:35:29 -08:00
ixheaacd_lpp_tran.c Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_lpp_tran.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_lt_predict.c Fix for crash in ixheaacd_lt_prediction 2018-11-23 15:35:29 -08:00
ixheaacd_lt_predict.h Fix for global buffer overflow in lt prediction function. 2018-11-18 11:04:35 -08:00
ixheaacd_main.h Fix for global buffer overflow in ixheaacd_tns_apply 2018-10-22 18:45:39 -07:00
ixheaacd_memory_standards.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_mps_dec.c Merge changes from topic "b117495362" into pi-dev am: 8fe5da1ed4 2018-11-01 15:49:11 -07:00
ixheaacd_mps_dec.h Fix stack-buffer-overflow in mps module 2018-08-31 10:12:43 -07:00
ixheaacd_mps_decor.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_decorr.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_huff_tab.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_hybfilter.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_hybrid_filt.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_interface.h Fix for Segmentation fault in ixheaacd_mps_apply_pre_matrix 2018-10-30 14:56:10 -07:00
ixheaacd_mps_nlc_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_parse.c Fix for oobw in ixheaacd_decode_init() 2018-11-29 16:30:14 -08:00
ixheaacd_mps_poly_filt.c Fix for Segmentation fault in ixheaacd_sbr_dec_from_mps 2018-07-03 14:18:07 -07:00
ixheaacd_mps_polyphase.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_pre_mix.c Fix for OOB access due to icc index parsing 2018-09-18 15:18:24 -07:00
ixheaacd_mps_process.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_rom.c Fix for OOB access due to icc index parsing 2018-09-18 15:18:24 -07:00
ixheaacd_mps_smoothing.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_mps_temp_process.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_mps_temp_reshape.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_multichannel.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_multichannel.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pns.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pns_js_thumb.c Fix for heap buffer overflow in tns block 2018-10-11 16:51:32 -07:00
ixheaacd_pred_vec_block.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_process.c Fix for un-initialized value in ixheaacd_acelp_alias_cnx 2018-11-25 15:50:42 -08:00
ixheaacd_process.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ps_bitdec.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ps_bitdec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ps_dec.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ps_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pulsedata.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pvc_dec.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pvc_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_pvc_rom.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_qmf_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_qmf_dec.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_qmf_poly.h Fix for stack corruption in esbr 2018-07-12 23:36:28 +00:00
ixheaacd_rev_vlc.c Fix for heap buffer overflow in aac showbit_32 function 2018-09-12 13:35:01 -07:00
ixheaacd_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_rvlc.h Fix for heap buffer overflow in huff code reorder 2018-09-18 13:05:13 -07:00
ixheaacd_sbr_common.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_const.h Fix for global buffer overflow in scale factor processing 2018-09-06 11:08:38 -07:00
ixheaacd_sbr_crc.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_crc.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_dec.c Fix for stack-buffer-underflow in ixheaacd_sbr_env_calc 2018-11-14 18:31:32 -08:00
ixheaacd_sbr_dec.h Fix for stack-buffer-underflow in ixheaacd_sbr_env_calc 2018-11-14 18:31:32 -08:00
ixheaacd_sbr_payload.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_rom.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_rom.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbr_scale.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbrdec_initfuncs.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_sbrdec_lpfuncs.c Fix for Segmentation fault in esbr co variance calcualtion 2018-07-03 14:26:48 -07:00
ixheaacd_sbrdecoder.c Fix for segmentation fault in hf generator 2018-11-02 22:53:22 +00:00
ixheaacd_sbrdecoder.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbrdecsettings.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_sbrqmftrans.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_spectrum_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_stereo.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_stereo.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_struct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_struct_def.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00
ixheaacd_tcx_fwd_alcnx.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_tcx_fwd_mdct.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_td_mdct.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_thumb_ps_dec.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_tns.c Fix for global buffer overflow in ixheaacd_tns_apply 2018-10-22 18:45:39 -07:00
ixheaacd_tns.h Formatting changes 2018-06-07 16:52:19 -07:00
ixheaacd_tns_usac.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_type_def.h Fix for heap buffer overflow in aac showbit_32 function 2018-09-12 13:35:01 -07:00
ixheaacd_vec_baisc_ops.h Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_ver_number.h Collected Cleanups from Ittiam 2018-06-05 13:04:22 -07:00
ixheaacd_Windowing.c Bring xHE-AAC into pi-dev branch 2018-05-17 14:36:48 -07:00
ixheaacd_windows.h Sanitization fixes from new CTS tests 2018-05-25 11:35:52 -07:00