diff options
author | Ray Essick <essick@google.com> | 2020-09-30 18:41:09 +0000 |
---|---|---|
committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | 2020-09-30 18:41:09 +0000 |
commit | 3ed0b59dc6fb7afbb46b1b90fd68fc23498e5ddf (patch) | |
tree | dd8dacfed8a460716cbf9891a3f5ce289666f06a | |
parent | 6772b2f2fcc053ce7939fa7eb886dabb33ce36de (diff) | |
parent | 060e1f9a114635371bdbe0911b07e3bc8373a6c3 (diff) | |
download | libxaac-3ed0b59dc6fb7afbb46b1b90fd68fc23498e5ddf.tar.gz |
Merge "Fix to handle segv in impd_filter_banks_process" am: e5c5475c98 am: 060e1f9a11
Original change: https://android-review.googlesource.com/c/platform/external/libxaac/+/1425116
Change-Id: Ide76e7b6665f82c16d4df71c6c7db6c11cbd2d4c
-rw-r--r-- | decoder/drc_src/impd_drc_dynamic_payload.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/decoder/drc_src/impd_drc_dynamic_payload.c b/decoder/drc_src/impd_drc_dynamic_payload.c index a8a15a9..f8a1aa9 100644 --- a/decoder/drc_src/impd_drc_dynamic_payload.c +++ b/decoder/drc_src/impd_drc_dynamic_payload.c @@ -231,6 +231,8 @@ WORD32 impd_dec_times(ia_bit_buf_struct* it_bit_buff, } } node_time_tmp = time_offs + time_delta * delta_tmin; + if (node_time_tmp >= (2 * AUDIO_CODEC_FRAME_SIZE_MAX - drc_frame_size)) + return UNEXPECTED_ERROR; if (node_time_tmp > drc_frame_size + time_offset) { if (node_res_flag == 0) { str_node[k].time = drc_frame_size + time_offset; |