diff options
| author | Ramesh Katuri <ramesh.katuri@ittiam.com> | 2018-09-07 11:28:47 +0530 |
|---|---|---|
| committer | Ray Essick <essick@google.com> | 2018-09-12 13:35:01 -0700 |
| commit | 2d55c27aeddfbf0b7d3ed79a9c3cc0c1796eb6ee (patch) | |
| tree | b2c3be725731c5d227544214cd6487827294fbb5 /decoder/ixheaacd_error_standards.h | |
| parent | d12d78c4aff781975d7b1840665321aa117a51a9 (diff) | |
| download | libxaac-2d55c27aeddfbf0b7d3ed79a9c3cc0c1796eb6ee.tar.gz | |
Fix for heap buffer overflow in aac showbit_32 function
Subtraction overflow was obseerved in the process window
sequence function which was fixed by adding saturation
check after subtraction. Bits available in rvlc decode
function is becoming negative. A check has been added
before reading bits from input buffer.
Bug:113262406
Test: poc with ASAN
Change-Id: I729420c9df163b9c8cf474e884c8b6d137781855
Diffstat (limited to 'decoder/ixheaacd_error_standards.h')
| -rw-r--r-- | decoder/ixheaacd_error_standards.h | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/decoder/ixheaacd_error_standards.h b/decoder/ixheaacd_error_standards.h index 736a659..7f029ca 100644 --- a/decoder/ixheaacd_error_standards.h +++ b/decoder/ixheaacd_error_standards.h @@ -20,8 +20,6 @@ #ifndef IXHEAACD_ERROR_STANDARDS_H #define IXHEAACD_ERROR_STANDARDS_H -typedef WORD32 IA_ERRORCODE; - #define IA_NO_ERROR 0x00000000 #define IA_FATAL_ERROR 0x80000000 |