diff options
| author | Jean-Michel Trivi <jmtrivi@google.com> | 2017-10-24 17:39:19 -0700 |
|---|---|---|
| committer | Jean-Michel Trivi <jmtrivi@google.com> | 2017-11-02 16:25:34 +0000 |
| commit | 51f38b3a6d49eaa2b7b90e5ac79d13b97c3decbb (patch) | |
| tree | 442735a9cd9bf28a587c0ecb853bc80ffb9823b2 /libSBRdec/src/sbrdec_drc.cpp | |
| parent | 9d4702f2d9ecec00c4e28de638b1f79afb5d696c (diff) | |
| download | fdk-aac-51f38b3a6d49eaa2b7b90e5ac79d13b97c3decbb.tar.gz fdk-aac-51f38b3a6d49eaa2b7b90e5ac79d13b97c3decbb.tar.bz2 fdk-aac-51f38b3a6d49eaa2b7b90e5ac79d13b97c3decbb.zip | |
DO NOT MERGE Prevent out of bound memory access in GetInvInt
In GetInvInt(int) function, malicious content can access memory
outside of the invCount array. Always bound access to valid
indices.
Test: see bug for malicious content, decoded with "stagefright -s -a"
Bug: 65025048
Change-Id: I92d4a14519f45d5a329d7f69f21f2aef0a8c6daa
Diffstat (limited to 'libSBRdec/src/sbrdec_drc.cpp')
0 files changed, 0 insertions, 0 deletions