diff options
author | Neelkamal Semwal <neelkamal.semwal@ittiam.com> | 2021-12-21 10:33:23 +0530 |
---|---|---|
committer | Ray Essick <essick@google.com> | 2022-01-07 19:38:38 +0000 |
commit | a3db049d695853c552bab755abac14daf21c6af5 (patch) | |
tree | dfc8c7ea69673cb3ee76cda2aadc9d6aed54cf97 | |
parent | c6590bb959ed11bd2d5e075f1d05f66deacf1baf (diff) | |
download | tremolo-a3db049d695853c552bab755abac14daf21c6af5.tar.gz |
Tremolo: Add check for bad return value in decode_map
Test: poc in bug report
Test: atest android.mediav2.cts.CodecDecoderTest
Test: atest VtsHalMediaC2V1_0TargetAudioDecTest
Test: atest VorbisDecoderTest
Bug: 210625816
Change-Id: Ib1c25d524d8ca64d491212edb0625a6541ec6a3f
(cherry picked from commit 3b8b8e610f2309a125b01d97a20c890ad820153b)
-rw-r--r-- | Tremolo/codebook.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/Tremolo/codebook.c b/Tremolo/codebook.c index 5a57a71..3c03f28 100644 --- a/Tremolo/codebook.c +++ b/Tremolo/codebook.c @@ -765,6 +765,7 @@ int decode_map(codebook *s, oggpack_buffer *b, ogg_int32_t *v, int point); static int decode_map(codebook *s, oggpack_buffer *b, ogg_int32_t *v, int point){ ogg_uint32_t entry = decode_packed_entry_number(s,b); int i; + if(entry==UINT_MAX)return -1; if(oggpack_eop(b))return(-1); /* 1 used by test file 0 */ |