diff options
| author | Jean-Michel Trivi <jmtrivi@google.com> | 2017-10-24 17:39:19 -0700 |
|---|---|---|
| committer | Jean-Michel Trivi <jmtrivi@google.com> | 2017-11-02 18:54:15 +0000 |
| commit | 0d54662fe8ad3b9fe2daf5689cbfec28f5374cfb (patch) | |
| tree | 442735a9cd9bf28a587c0ecb853bc80ffb9823b2 /libAACdec/src/aacdec_hcrs.cpp | |
| parent | 9000e05228a100873606bfc4d758a2390b3eab1d (diff) | |
| download | fdk-aac-0d54662fe8ad3b9fe2daf5689cbfec28f5374cfb.tar.gz fdk-aac-0d54662fe8ad3b9fe2daf5689cbfec28f5374cfb.tar.bz2 fdk-aac-0d54662fe8ad3b9fe2daf5689cbfec28f5374cfb.zip | |
DO NOT MERGE Prevent out of bound memory access in GetInvInt
In GetInvInt(int) function, malicious content can access memory
outside of the invCount array. Always bound access to valid
indices.
Test: see bug for malicious content, decoded with "stagefright -s -a"
Bug: 65025048
Change-Id: I92d4a14519f45d5a329d7f69f21f2aef0a8c6daa
Diffstat (limited to 'libAACdec/src/aacdec_hcrs.cpp')
0 files changed, 0 insertions, 0 deletions