Merge "Add sanity check in huff_decode()" am: 3942213f19

am: 8d06f35f31

Change-Id: I387be28f72d64ea61a1628d296d9abcdf361e54b
This commit is contained in:
Jean-Michel Trivi 2019-01-02 12:50:10 -08:00 committed by android-build-merger
commit 04b22fae53
1 changed files with 8 additions and 0 deletions

View File

@ -647,6 +647,10 @@ static ERROR_t huff_decode(HANDLE_FDK_BITSTREAM strm, SCHAR* out_data_1,
}
df_rest_flag_1 = num_val_1_int % 2;
if (df_rest_flag_1) num_val_1_int -= 1;
if (num_val_1_int < 0) {
err = HUFFDEC_NOTOK;
goto bail;
}
}
if (out_data_2 != NULL) {
if (diff_type_2 == DIFF_FREQ) {
@ -658,6 +662,10 @@ static ERROR_t huff_decode(HANDLE_FDK_BITSTREAM strm, SCHAR* out_data_1,
}
df_rest_flag_2 = num_val_2_int % 2;
if (df_rest_flag_2) num_val_2_int -= 1;
if (num_val_2_int < 0) {
err = HUFFDEC_NOTOK;
goto bail;
}
}
if (out_data_1 != NULL) {