diff options
| author | Ramesh Katuri <ramesh.katuri@ittiam.com> | 2018-09-07 11:28:47 +0530 |
|---|---|---|
| committer | Ray Essick <essick@google.com> | 2018-09-12 13:35:01 -0700 |
| commit | 2d55c27aeddfbf0b7d3ed79a9c3cc0c1796eb6ee (patch) | |
| tree | b2c3be725731c5d227544214cd6487827294fbb5 /decoder/ixheaacd_type_def.h | |
| parent | d12d78c4aff781975d7b1840665321aa117a51a9 (diff) | |
| download | libxaac-2d55c27aeddfbf0b7d3ed79a9c3cc0c1796eb6ee.tar.gz | |
Fix for heap buffer overflow in aac showbit_32 function
Subtraction overflow was obseerved in the process window
sequence function which was fixed by adding saturation
check after subtraction. Bits available in rvlc decode
function is becoming negative. A check has been added
before reading bits from input buffer.
Bug:113262406
Test: poc with ASAN
Change-Id: I729420c9df163b9c8cf474e884c8b6d137781855
Diffstat (limited to 'decoder/ixheaacd_type_def.h')
| -rw-r--r-- | decoder/ixheaacd_type_def.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/decoder/ixheaacd_type_def.h b/decoder/ixheaacd_type_def.h index b762b2f..2205550 100644 --- a/decoder/ixheaacd_type_def.h +++ b/decoder/ixheaacd_type_def.h @@ -84,6 +84,7 @@ typedef unsigned int UWORD; /* ulp SLOOPIDX ulp_index */ typedef LOOPIDX LOOPINDEX; /* lp LOOPIDX lp_index */ typedef ULOOPIDX ULOOPINDEX; /* ulp SLOOPIDX ulp_index */ +typedef WORD32 IA_ERRORCODE; #define PLATFORM_INLINE __inline #endif /* IXHEAACD_TYPE_DEF_H */ |