diff options
| author | Fraunhofer IIS FDK <audio-fdk@iis.fraunhofer.de> | 2018-06-08 18:08:57 +0200 |
|---|---|---|
| committer | Jean-Michel Trivi <jmtrivi@google.com> | 2018-11-27 12:34:42 -0500 |
| commit | b325367b332525e82ab331e3750a955a0679529a (patch) | |
| tree | f05149bfb57cab5af757acd630b2353475d422ab /libSACdec/src | |
| parent | a4d6ca7b07569aac07d50f894f3757b58dd2d6eb (diff) | |
| download | fdk-aac-b325367b332525e82ab331e3750a955a0679529a.tar.gz fdk-aac-b325367b332525e82ab331e3750a955a0679529a.tar.bz2 fdk-aac-b325367b332525e82ab331e3750a955a0679529a.zip | |
Unsigned Integer Overflow in SpatialDecParseSpecificConfigHeader().
Bug: 112661893
Test: atest DecoderTestXheAac ; atest DecoderTestAacDrc
Change-Id: I5994a55f993835fa511ff61a337726b3e51aed5d
Diffstat (limited to 'libSACdec/src')
| -rw-r--r-- | libSACdec/src/sac_bitdec.cpp | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/libSACdec/src/sac_bitdec.cpp b/libSACdec/src/sac_bitdec.cpp index 37e0cf2..45fb17a 100644 --- a/libSACdec/src/sac_bitdec.cpp +++ b/libSACdec/src/sac_bitdec.cpp @@ -291,13 +291,13 @@ SACDEC_ERROR SpatialDecParseSpecificConfigHeader( if (sacHeaderLen == 127) { sacHeaderLen += FDKreadBits(bitstream, 16); } - numFillBits = FDKgetValidBits(bitstream); + numFillBits = (INT)FDKgetValidBits(bitstream); err = SpatialDecParseSpecificConfig(bitstream, pSpatialSpecificConfig, sacHeaderLen, coreCodec); numFillBits -= - FDKgetValidBits(bitstream); /* the number of read bits (tmpBits) */ + (INT)FDKgetValidBits(bitstream); /* the number of read bits (tmpBits) */ numFillBits = (8 * sacHeaderLen) - numFillBits; if (numFillBits < 0) { /* Parsing went wrong */ |