diff options
| author | Jean-Michel Trivi <jmtrivi@google.com> | 2016-03-21 14:12:19 -0700 |
|---|---|---|
| committer | Jean-Michel Trivi <jmtrivi@google.com> | 2016-03-21 21:59:22 +0000 |
| commit | a06d1c2b9af1621037b48557aac42b5ecbdb03b3 (patch) | |
| tree | 91a3d02b4e8f917207648edac2f49b2b10f81dcb /libAACdec/src/rvlcconceal.h | |
| parent | fa3eba16446cc8f2f5e2dfc20d86a49dbd37299e (diff) | |
| download | fdk-aac-a06d1c2b9af1621037b48557aac42b5ecbdb03b3.tar.gz fdk-aac-a06d1c2b9af1621037b48557aac42b5ecbdb03b3.tar.bz2 fdk-aac-a06d1c2b9af1621037b48557aac42b5ecbdb03b3.zip | |
Fix stack corruption happening in aacDecoder_drcExtractAndMap()
In the aacDecoder_drcExtractAndMap() function, self->numThreads
can be used after having exceeded its intended max value,
MAX_DRC_THREADS, causing memory to be cleared after the
threadBs[MAX_DRC_THREADS] array.
The crash is prevented by never using self->numThreads with
a value equal to or greater than MAX_DRC_THREADS.
A proper fix will be required as there seems to be an issue as
to which entry in the threadBs array is meant to be initialized
and used.
Bug 26751339
Change-Id: I655cc40c35d4206ab72e83b2bdb751be2fe52b5a
Diffstat (limited to 'libAACdec/src/rvlcconceal.h')
0 files changed, 0 insertions, 0 deletions