From 8972e93edd448c378e0cc099a0fbe25b64295a64 Mon Sep 17 00:00:00 2001
From: Jean-Michel Trivi <jmtrivi@google.com>
Date: Thu, 7 Mar 2019 14:16:05 -0800
Subject: [PATCH] libSBRdec: prevent OOB access

In generateFixFixOnly() check validity of  index before accessing
  SBR decoder envolope tables.

Bug: 112052062
Test: see bug
Change-Id: Icd7ec3807eea9ef8417dba7383f361101becc4f2
---
 libSBRdec/src/env_extr.cpp | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/libSBRdec/src/env_extr.cpp b/libSBRdec/src/env_extr.cpp
index c72a7b6..5b7a0b1 100644
--- a/libSBRdec/src/env_extr.cpp
+++ b/libSBRdec/src/env_extr.cpp
@@ -1152,6 +1152,10 @@ static int generateFixFixOnly(FRAME_INFO *hSbrFrameInfo, int tranPosInternal,
   int nEnv, i, tranIdx;
   const int *pTable;
 
+  if (tranPosInternal >= numberTimeSlots) {
+    return 0;
+  }
+
   switch (numberTimeSlots) {
     case 8:
       pTable = FDK_sbrDecoder_envelopeTable_8[tranPosInternal];