diff options
| author | Ray Essick <essick@google.com> | 2020-09-30 18:52:57 +0000 |
|---|---|---|
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | 2020-09-30 18:52:57 +0000 |
| commit | 207c438c0c52a1800ac0aad73e1e8b529cbf5d20 (patch) | |
| tree | dd8dacfed8a460716cbf9891a3f5ce289666f06a | |
| parent | 24854482033d30299d26453271a1952a02989e91 (diff) | |
| parent | 3ed0b59dc6fb7afbb46b1b90fd68fc23498e5ddf (diff) | |
| download | libxaac-207c438c0c52a1800ac0aad73e1e8b529cbf5d20.tar.gz | |
Merge "Fix to handle segv in impd_filter_banks_process" am: e5c5475c98 am: 060e1f9a11 am: 3ed0b59dc6
Original change: https://android-review.googlesource.com/c/platform/external/libxaac/+/1425116
Change-Id: I812e6b72309bfd0aa83b4bdd729face4def77adb
| -rw-r--r-- | decoder/drc_src/impd_drc_dynamic_payload.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/decoder/drc_src/impd_drc_dynamic_payload.c b/decoder/drc_src/impd_drc_dynamic_payload.c index a8a15a9..f8a1aa9 100644 --- a/decoder/drc_src/impd_drc_dynamic_payload.c +++ b/decoder/drc_src/impd_drc_dynamic_payload.c @@ -231,6 +231,8 @@ WORD32 impd_dec_times(ia_bit_buf_struct* it_bit_buff, } } node_time_tmp = time_offs + time_delta * delta_tmin; + if (node_time_tmp >= (2 * AUDIO_CODEC_FRAME_SIZE_MAX - drc_frame_size)) + return UNEXPECTED_ERROR; if (node_time_tmp > drc_frame_size + time_offset) { if (node_res_flag == 0) { str_node[k].time = drc_frame_size + time_offset; |