diff options
| author | Jean-Michel Trivi <jmtrivi@google.com> | 2017-10-30 14:07:07 -0700 |
|---|---|---|
| committer | Jean-Michel Trivi <jmtrivi@google.com> | 2017-10-30 22:45:05 +0000 |
| commit | 76c4625fe3c1cfcb0a493b8df418cc86c294160f (patch) | |
| tree | 9ea89483973e0bc7f119400028131d8ace7c37dd /libMpegTPDec/src/tpdec_asc.cpp | |
| parent | 78653b30e9c1907d4c6eefa30ff954e0c4398447 (diff) | |
| download | fdk-aac-76c4625fe3c1cfcb0a493b8df418cc86c294160f.tar.gz fdk-aac-76c4625fe3c1cfcb0a493b8df418cc86c294160f.tar.bz2 fdk-aac-76c4625fe3c1cfcb0a493b8df418cc86c294160f.zip | |
DO NOT MERGE Prevent out of bound memory access in GetInvInt
In GetInvInt(int) function, malicious content can access memory
outside of the invCount array. Always bound access to valid
indices.
Test: see bug for malicious content, decoded with "stagefright -s -a"
Bug: 65025048
Change-Id: Id1f1582bc5afc76e3e90128d92034a5899a9b51e
Diffstat (limited to 'libMpegTPDec/src/tpdec_asc.cpp')
0 files changed, 0 insertions, 0 deletions