Jean-Michel Trivi 6d3dd40e20 Fix out of bound memory access in lppTransposer ...

In TRANSPOSER_SETTINGS, initialize the whole bwBorders array to a
  reasonable value to guarantee correct termination in while loop
  in lppTransposer function. This fixes the reported bug.
For completeness:
  - clear the whole bwIndex array instead of noOfPatches entries only.
  - abort criterion in while loop to prevent potential
    infinite loop, and limit bwIndex[patch] to a valid range.

Test: see bug for malicious content, decoded with "stagefright -s -a"
Bug: 65280786

Change-Id: I16ed2e1c0f1601926239a652ca20a91284151843

2017-10-31 21:40:14 +00:00

..

arm

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

env_calc.cpp

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

env_calc.h

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

env_dec.cpp

Decoder stability, sanity checks improvements

2013-08-27 16:28:09 -07:00

env_dec.h

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

env_extr.cpp

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

env_extr.h

AAC-Decoder: SBR delay for gapless

2014-05-20 17:39:03 -07:00

huff_dec.cpp

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

huff_dec.h

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

lpp_tran.cpp

Fix out of bound memory access in lppTransposer

2017-10-31 21:40:14 +00:00

lpp_tran.h

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

psbitdec.cpp

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

psbitdec.h

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

psdec_hybrid.cpp

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

psdec_hybrid.h

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

psdec.cpp

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

psdec.h

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

sbr_crc.cpp

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

sbr_crc.h

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

sbr_deb.cpp

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

sbr_deb.h

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

sbr_dec.cpp

FDK update for downsampled SBR

2013-08-27 15:57:28 -07:00

sbr_dec.h

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

sbr_ram.cpp

AAC Decoder: support 6.1/7.1 decoded as 5.1

2013-12-30 09:40:08 -08:00

sbr_ram.h

AAC Decoder: support 6.1/7.1 decoded as 5.1

2013-12-30 09:40:08 -08:00

sbr_rom.cpp

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

sbr_rom.h

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

sbr_scale.h

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

sbrdec_drc.cpp

Decode dynamic range control improvements

2013-08-27 16:20:46 -07:00

sbrdec_drc.h

AAC Decoder: support 6.1/7.1 decoded as 5.1

2013-12-30 09:40:08 -08:00

sbrdec_freq_sca.cpp

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

sbrdec_freq_sca.h

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00

sbrdecoder.cpp

AAC-Decoder: SBR delay for gapless

2014-05-20 17:39:03 -07:00

transcendent.h

Disclaimer update, lib version increment

2013-08-20 14:38:55 -07:00