diff options
| author | Jean-Michel Trivi <jmtrivi@google.com> | 2016-03-21 14:12:19 -0700 |
|---|---|---|
| committer | Jean-Michel Trivi <jmtrivi@google.com> | 2016-03-21 21:58:57 +0000 |
| commit | e46ff0f7f92fd4be35afc78050f01210a375fbb7 (patch) | |
| tree | 825864f5cf2ccf631c4652fd9f12e87792f03b61 /libSYS | |
| parent | c203653dcb46c1fbee0cf8bd719427cbe7fa4f7f (diff) | |
| download | fdk-aac-e46ff0f7f92fd4be35afc78050f01210a375fbb7.tar.gz fdk-aac-e46ff0f7f92fd4be35afc78050f01210a375fbb7.tar.bz2 fdk-aac-e46ff0f7f92fd4be35afc78050f01210a375fbb7.zip | |
Fix stack corruption happening in aacDecoder_drcExtractAndMap()
In the aacDecoder_drcExtractAndMap() function, self->numThreads
can be used after having exceeded its intended max value,
MAX_DRC_THREADS, causing memory to be cleared after the
threadBs[MAX_DRC_THREADS] array.
The crash is prevented by never using self->numThreads with
a value equal to or greater than MAX_DRC_THREADS.
A proper fix will be required as there seems to be an issue as
to which entry in the threadBs array is meant to be initialized
and used.
Bug 26751339
Change-Id: I655cc40c35d4206ab72e83b2bdb751be2fe52b5a
Diffstat (limited to 'libSYS')
0 files changed, 0 insertions, 0 deletions