| Commit message (Collapse) | Author | Age | Files | Lines |
|\
| |
| |
| |
| |
| |
| |
| | |
Original change: https://android-review.googlesource.com/c/platform/external/aac/+/1527719
MUST ONLY BE SUBMITTED BY AUTOMERGER
Change-Id: Ib842fadf4278b74faa59e83ef8401b154ec487d0
|
| |
| |
| |
| |
| |
| |
| | |
Test: ./aac_enc_fuzzer
Bug: 172429950
Change-Id: Ia84f85425f6df10b13a3d045472f7f684f27eb8a
|
|/
|
|
|
|
|
|
|
|
|
|
|
| |
The aacDecoder_DecodeFrame function takes a size in numbers of
samples (INT_PCM), not a number of bytes. Using a number of
bytes caused the FDK to believe the array was larger than it
really was. Therefore on invalid frames, it would try to
clear a size larger than was really available, causing an OOB
crash.
Bug: 161014225
Test: check clusterfuzz results for case 6217304556437504
Change-Id: I9278898a17c1c961c568e841c6037d0c14bcc8b4
|
|
|
|
|
|
|
| |
Test: ./aac_dec_fuzzer
Bug: 158206619
Change-Id: I42d57ec832dbd273f66ce149ce81bfcb1c514add
|
|
|
|
|
|
|
| |
Test: ./aac_dec_fuzzer
Bug: 156871294
Change-Id: Idfc93a6f6c71a78c2b7759443161d8e75dfc4670
|
|
Test: ./aac_dec_fuzzer
Bug: 151595970
Change-Id: Iad37ae766288e9490520d858a6de0dd755e70681
|