libxaac/decoder/drc_src
Ramesh Katuri ce4e2da628 Fix for oobw in impd_manage_drc_complexity() due to drc_set_id
drc_set_id is a 6 bit filed read from bitstream. This drc_set_id is
used to access drc_set_id_valid_flag[] array whose size is
DRC_INSTRUCTIONS_COUNT_MAX i.e. 36. drc_set_id value greater than or
equal to 36 is causing oob write.

Bound check has been added for drc_set_id

Bug:119261935
Test: vendor
Change-Id: Ib218f4d72d23a2cbf4e74eea6a2d71ae8a735c6d
2018-11-29 16:24:19 -08:00
..
impd_apicmd_standards.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_api.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_api_defs.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_api_struct_def.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_bitbuffer.c Fix for OOB write in loudness info set ext 2018-10-27 10:38:12 -07:00
impd_drc_bitbuffer.h Fix for OOB write in loudness info set ext 2018-10-27 10:38:12 -07:00
impd_drc_bitstream_dec_api.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_common.h Merge "Fix for stack over flow write in drc set pre selection" into pi-dev 2018-10-29 22:08:57 +00:00
impd_drc_config_params.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_dec.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_definitions.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_dynamic_payload.c Merge "Fix for OOB write in mpeg-d drc bit stream parsing by adding bound checks" into pi-dev 2018-11-21 17:21:38 +00:00
impd_drc_eq.c Changes based on review comments 2018-07-03 11:21:47 -07:00
impd_drc_eq.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_error_codes.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_extr_delta_coded_info.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_extr_delta_coded_info.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_fiilter_bank.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_filter_bank.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_filter_bank.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_gain_dec.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_gain_dec.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_gain_decoder.c Fix for crash due to un-initailized variables in drc module 2018-10-04 10:59:52 -07:00
impd_drc_gain_decoder.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_hashdefines.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_host_params.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_host_params.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_init.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_interface.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_interface_decoder.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_interface_parser.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_loud_eq.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_loudness_control.c Fix for stack buffer overflow in drc loudness control 2018-10-29 15:47:53 -07:00
impd_drc_loudness_control.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_main_qmf_process.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_main_stft_process.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_main_td_process.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_main_td_qmf_process.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_multi_band.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_multiband.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_parametric_dec.c Changes based on review comments 2018-07-03 11:21:47 -07:00
impd_drc_parser.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_parser_interface.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_peak_limiter.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_peak_limiter.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_peak_limiter_struct.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_process.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_process_audio.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_qmf_filter.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_rom.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_rom.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_sel_proc_drc_set_sel.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_selection_process.c Merge "Fix for stack overflow in eq selection in drc module" into pi-dev am: 09cc55d5fa 2018-10-29 13:58:20 -07:00
impd_drc_selection_process.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_selection_process_drcset_selection.c Merge "Fix for OOB write in mpeg-d drc bit stream parsing by adding bound checks" into pi-dev am: 850b4ba6f3 2018-11-21 09:38:33 -08:00
impd_drc_selection_process_init.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_shape_filter.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_static_payload.c Fix for oobw in impd_manage_drc_complexity() due to drc_set_id 2018-11-29 16:24:19 -08:00
impd_drc_struct.h Fix for OOB in parsing loud equalizer instruction in drc 2018-10-27 13:23:13 -07:00
impd_drc_tables.c Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_tables.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_bitstream_dec_api.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_common.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_dec.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_eq.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_gain_dec.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_interface.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_loud_eq.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_multi_band.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_parser.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_process_audio.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_sel_proc_drc_set_sel.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_sel_proc_init.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_sel_proc_loudness_control.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_shape_filter.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_drc_uni_tables.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_error_handler.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_error_standards.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_memory_standards.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_parametric_drc_dec.h Formatting changes 2018-06-07 16:52:19 -07:00
impd_type_def.h Formatting changes 2018-06-07 16:52:19 -07:00