diff options
| author | TreeHugger Robot <treehugger-gerrit@google.com> | 2020-01-16 00:50:07 +0000 |
|---|---|---|
| committer | Android (Google) Code Review <android-gerrit@google.com> | 2020-01-16 00:50:07 +0000 |
| commit | 9d8fb8147acb67dcc6cffc703770731bfced8c6a (patch) | |
| tree | 4b385be18c02cf803a49df62ee34e9b96c7b1682 /decoder | |
| parent | 3214d04ad9866598b8c2137ef40325fb28c71c29 (diff) | |
| parent | 3bb1d13705b4ac547837e6ad7345785dbfdbfdcc (diff) | |
| download | libxaac-9d8fb8147acb67dcc6cffc703770731bfced8c6a.tar.gz | |
Merge "Fix for heap-buffer-overflow in ixheaacd_read_bits_buf."
Diffstat (limited to 'decoder')
| -rw-r--r-- | decoder/ixheaacd_headerdecode.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/decoder/ixheaacd_headerdecode.c b/decoder/ixheaacd_headerdecode.c index 9ca5a34..e9b917c 100644 --- a/decoder/ixheaacd_headerdecode.c +++ b/decoder/ixheaacd_headerdecode.c @@ -997,7 +997,7 @@ WORD32 ixheaacd_aac_headerdecode( handle_bit_buff = ixheaacd_create_init_bit_buf( &it_bit_buff, (UWORD8 *)(buffer + adts.aac_frame_length), - (WORD16)(header_len - adts.aac_frame_length)); + (WORD16)(header_len - bytes_taken - adts.aac_frame_length)); adts_loc.sync_word = (WORD16)ixheaacd_read_bits_buf(handle_bit_buff, 12); |