1
0
mirror of https://github.com/mstorsjo/fdk-aac.git synced 2025-06-05 22:39:13 +02:00
Jean-Michel Trivi 6d3dd40e20 Fix out of bound memory access in lppTransposer
In TRANSPOSER_SETTINGS, initialize the whole bwBorders array to a
  reasonable value to guarantee correct termination in while loop
  in lppTransposer function. This fixes the reported bug.
For completeness:
  - clear the whole bwIndex array instead of noOfPatches entries only.
  - abort criterion in while loop to prevent potential
    infinite loop, and limit bwIndex[patch] to a valid range.

Test: see bug for malicious content, decoded with "stagefright -s -a"
Bug: 65280786

Change-Id: I16ed2e1c0f1601926239a652ca20a91284151843
2017-10-31 21:40:14 +00:00
2013-09-03 14:19:38 -07:00
2014-04-09 15:49:10 +00:00
2013-09-03 14:19:38 -07:00
2014-05-20 17:39:03 -07:00
2012-07-11 10:15:24 -07:00
2012-07-11 10:15:24 -07:00
2012-07-11 10:15:24 -07:00
Description
No description provided
9.8 MiB
Languages
C++ 75.2%
C 24.5%
CMake 0.2%
Makefile 0.1%