aboutsummaryrefslogtreecommitdiff
path: root/decoder
diff options
context:
space:
mode:
authorTreeHugger Robot <treehugger-gerrit@google.com>2020-01-15 19:58:59 +0000
committerAndroid (Google) Code Review <android-gerrit@google.com>2020-01-15 19:58:59 +0000
commit6606e742ba6b8962f6f7a02f8050a00c22f9bdc8 (patch)
treee8b62e5b1185b8cf653cd81398dde6094cf1f377 /decoder
parentc31cf4f9629ee3b89420c02ddbf30d82d40d150e (diff)
parent86d7dd791e2e5dd1db366f1007d8fb5ac3168f2e (diff)
downloadlibxaac-6606e742ba6b8962f6f7a02f8050a00c22f9bdc8.tar.gz
Merge "Fix for oob in ia_drc_instructions_struct"
Diffstat (limited to 'decoder')
-rw-r--r--decoder/drc_src/impd_drc_static_payload.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/decoder/drc_src/impd_drc_static_payload.c b/decoder/drc_src/impd_drc_static_payload.c
index 95c9e58..5cffae2 100644
--- a/decoder/drc_src/impd_drc_static_payload.c
+++ b/decoder/drc_src/impd_drc_static_payload.c
@@ -1225,6 +1225,9 @@ impd_parse_drc_config(ia_bit_buf_struct* it_bit_buff,
if (err) return (err);
}
+ if ((drc_config->drc_instructions_uni_drc_count +
+ drc_config->dwnmix_instructions_count) >= DRC_INSTRUCTIONS_COUNT_MAX)
+ return (UNEXPECTED_ERROR);
impd_drc_gen_instructions_for_drc_off(drc_config);
return (0);
}