diff options
| author | TreeHugger Robot <treehugger-gerrit@google.com> | 2020-01-20 17:16:56 +0000 |
|---|---|---|
| committer | Android (Google) Code Review <android-gerrit@google.com> | 2020-01-20 17:16:56 +0000 |
| commit | 7d71f971a86a9ef8fe09443cff097c6fd1d6f495 (patch) | |
| tree | 3c353d27e5577994d236b8e68ecb7dab8a9b1e2e /decoder | |
| parent | 3938795985815374a55c26925ac131ab4be54177 (diff) | |
| parent | 33026c922d7ba0a61216d758415077f0d2e72f25 (diff) | |
| download | libxaac-7d71f971a86a9ef8fe09443cff097c6fd1d6f495.tar.gz | |
Merge "Fix for SBO in ixheaacd_enery_calc_persfb function"
Diffstat (limited to 'decoder')
| -rw-r--r-- | decoder/ixheaacd_env_calc.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/decoder/ixheaacd_env_calc.c b/decoder/ixheaacd_env_calc.c index 8fa77dc..dd873a8 100644 --- a/decoder/ixheaacd_env_calc.c +++ b/decoder/ixheaacd_env_calc.c @@ -809,6 +809,8 @@ IA_ERRORCODE ixheaacd_calc_sbrenvelope( start_pos = SBR_TIME_STEP * ptr_border_vec[i]; end_pos = SBR_TIME_STEP * ptr_border_vec[i + 1]; } + if ((start_pos >= MAX_ENV_COLS) || (end_pos > MAX_ENV_COLS)) + return IA_FATAL_ERROR; freq_res = ptr_frame_data->str_frame_info_details.freq_res[i]; if (noise_floor_idx >= MAX_NOISE_ENVELOPES) return IA_FATAL_ERROR; |