diff options
| author | Jean-Michel Trivi <jmtrivi@google.com> | 2017-10-24 17:39:19 -0700 |
|---|---|---|
| committer | Jean-Michel Trivi <jmtrivi@google.com> | 2017-11-02 19:18:56 +0000 |
| commit | 9fb4261c43a2d15f3b77a7e56470ed6784f83d04 (patch) | |
| tree | 5e4a7564d5e88c489a0b0a5a91ecf407c94ab77c /libMpegTPDec/src/tpdec_adts.h | |
| parent | a4aa860efb3b3ff2d535a4af45457e888aefa85e (diff) | |
| download | fdk-aac-9fb4261c43a2d15f3b77a7e56470ed6784f83d04.tar.gz fdk-aac-9fb4261c43a2d15f3b77a7e56470ed6784f83d04.tar.bz2 fdk-aac-9fb4261c43a2d15f3b77a7e56470ed6784f83d04.zip | |
DO NOT MERGE Prevent out of bound memory access in GetInvInt
In GetInvInt(int) function, malicious content can access memory
outside of the invCount array. Always bound access to valid
indices.
Test: see bug for malicious content, decoded with "stagefright -s -a"
Bug: 65025048
Change-Id: I92d4a14519f45d5a329d7f69f21f2aef0a8c6daa
Diffstat (limited to 'libMpegTPDec/src/tpdec_adts.h')
0 files changed, 0 insertions, 0 deletions