fdk-aac

mirror of https://github.com/mstorsjo/fdk-aac.git synced 2025-02-01 08:26:43 +01:00

Go to file

Fraunhofer IIS FDK c516539a20 Fix heap buffer overflow in sbrDecoder_AssignQmfChannels2SbrChannels().

In the bug the SBR decoder has already set up 9 channels and tries to
allocate one more channel. The assignment of the QMF channels to SBR
channels fails since the QMF domain manages only 8+1 channels instead
of 10 channels as reqeusted by SBR.
Here we have added a check in sbrDecoder_InitElement() which will
return with a parse error in case additional SBR channels would exceed
the maximum number of SBR channels. This solves the potential heap
buffer overflow.

Bug: 158762825
Test: atest DecoderTestAacDrc DecoderTestAacFormat DecoderTestXheAac
Merged-In: I0150ac6d5a47ffce883010f531928656eebc619e
Change-Id: I8569a15214707ab622e986b34b4b917251495662

2020-07-09 08:56:14 -07:00

documentation

Upgrade to FDKv2

2018-04-19 11:21:15 -07:00

libAACdec

Merge "Unify audio element loop abort criterion in ER syntax" into pi-dev

2018-10-01 22:19:05 +00:00

libAACenc

Upgrade to FDKv2

2018-04-19 11:21:15 -07:00

libArithCoding

Upgrade to FDKv2