summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAndreas Cadhalpun <[email protected]>2015-04-16 20:04:54 +0200
committerMichael Niedermayer <[email protected]>2015-04-16 20:36:36 +0200
commitfc9514bf4dd73c85ee4b7f4dc7ca0fb4fb7ea3e1 (patch)
treecfb5be95cf4f02afa4747516421abeb8af80a0a7
parente863d17e6278248b1da991090fd5f2000b4d962b (diff)
aacpsy: avoid psy_band->threshold becoming NaN
If band->thr is 0.0f, the division is undefined, making norm_fac not a number or infinity, which causes psy_band->threshold to become NaN. This is passed on to other variables until it finally reaches sce->sf_idx and is converted to an integer (-2147483648). This causes a segmentation fault when it is used as array index. Signed-off-by: Andreas Cadhalpun <[email protected]> Reviewed-by: Claudio Freire <[email protected]> Signed-off-by: Michael Niedermayer <[email protected]> (cherry picked from commit e224aa41917454e7b5c23d9f2541425743ce595a) Signed-off-by: Michael Niedermayer <[email protected]>
-rw-r--r--libavcodec/aacpsy.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/libavcodec/aacpsy.c b/libavcodec/aacpsy.c
index d2a782e8dd..a1183bea3f 100644
--- a/libavcodec/aacpsy.c
+++ b/libavcodec/aacpsy.c
@@ -727,7 +727,10 @@ static void psy_3gpp_analyze_channel(FFPsyContext *ctx, int channel,
if (active_lines > 0.0f)
band->thr = calc_reduced_thr_3gpp(band, coeffs[g].min_snr, reduction);
pe += calc_pe_3gpp(band);
- band->norm_fac = band->active_lines / band->thr;
+ if (band->thr > 0.0f)
+ band->norm_fac = band->active_lines / band->thr;
+ else
+ band->norm_fac = 0.0f;
norm_fac += band->norm_fac;
}
}