aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRay Essick <essick@google.com>2020-09-30 18:29:14 +0000
committerAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>2020-09-30 18:29:14 +0000
commit060e1f9a114635371bdbe0911b07e3bc8373a6c3 (patch)
treedd8dacfed8a460716cbf9891a3f5ce289666f06a
parentd836d24c78d35304092ff5d4fc5f41d9a14831f6 (diff)
parente5c5475c98b9ee6f2f6160fab78e2f6cca5640b9 (diff)
downloadlibxaac-060e1f9a114635371bdbe0911b07e3bc8373a6c3.tar.gz
Merge "Fix to handle segv in impd_filter_banks_process" am: e5c5475c98
Original change: https://android-review.googlesource.com/c/platform/external/libxaac/+/1425116 Change-Id: I8ef47b89b1764a40351c85d4e9484bfcc7a49810
-rw-r--r--decoder/drc_src/impd_drc_dynamic_payload.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/decoder/drc_src/impd_drc_dynamic_payload.c b/decoder/drc_src/impd_drc_dynamic_payload.c
index a8a15a9..f8a1aa9 100644
--- a/decoder/drc_src/impd_drc_dynamic_payload.c
+++ b/decoder/drc_src/impd_drc_dynamic_payload.c
@@ -231,6 +231,8 @@ WORD32 impd_dec_times(ia_bit_buf_struct* it_bit_buff,
}
}
node_time_tmp = time_offs + time_delta * delta_tmin;
+ if (node_time_tmp >= (2 * AUDIO_CODEC_FRAME_SIZE_MAX - drc_frame_size))
+ return UNEXPECTED_ERROR;
if (node_time_tmp > drc_frame_size + time_offset) {
if (node_res_flag == 0) {
str_node[k].time = drc_frame_size + time_offset;