Unsigned Integer Overflow in aacDecoder_DecodeFrame().

Bug: 112661742
Test: atest DecoderTestXheAac ; atest DecoderTestAacDrc

Change-Id: I617dd545f9ea0aca5a5e7d214bbc35f089bc355d
This commit is contained in:
Fraunhofer IIS FDK 2018-06-08 18:08:23 +02:00 committed by Jean-Michel Trivi
parent a4d6ca7b07
commit eb0711921b
1 changed files with 1 additions and 1 deletions

View File

@ -1882,7 +1882,7 @@ aacDecoder_DecodeFrame(HANDLE_AACDECODER self, INT_PCM *pTimeData_extern,
} /* USAC DASH IPF flushing possible end */ } /* USAC DASH IPF flushing possible end */
if (accessUnit < numPrerollAU) { if (accessUnit < numPrerollAU) {
FDKpushBack(hBsAu, auStartAnchor - FDKgetValidBits(hBsAu)); FDKpushBack(hBsAu, auStartAnchor - (INT)FDKgetValidBits(hBsAu));
} else { } else {
if ((self->buildUpStatus == AACDEC_RSV60_BUILD_UP_ON) || if ((self->buildUpStatus == AACDEC_RSV60_BUILD_UP_ON) ||
(self->buildUpStatus == AACDEC_RSV60_BUILD_UP_ON_IN_BAND) || (self->buildUpStatus == AACDEC_RSV60_BUILD_UP_ON_IN_BAND) ||