aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Niedermayer <michael@niedermayer.cc>2017-05-05 13:16:07 +0200
committerMichael Niedermayer <michael@niedermayer.cc>2017-05-20 03:41:34 +0200
commitaa941e9aa9d5f5cea07f7d93d6f2c37021c72d3d (patch)
tree5a533c0b0886cc6b87a35c86204cf466bdac7885
parent53567e573bde156021cb375dba5c76d11a5e2d19 (diff)
downloadffmpeg-aa941e9aa9d5f5cea07f7d93d6f2c37021c72d3d.tar.gz
avcodec/aacps: Fix undefined behavior
Fixes: 1337/clusterfuzz-testcase-minimized-5212314171080704 Fixes the existence of a potentially invalid pointer intermediate Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 527f89e05922e840083ac6d49eeb838b1e350dd4) Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
-rw-r--r--libavcodec/aacps.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/aacps.c b/libavcodec/aacps.c
index ccc79ffc1d..48b595adbd 100644
--- a/libavcodec/aacps.c
+++ b/libavcodec/aacps.c
@@ -975,7 +975,7 @@ static void stereo_processing(PSContext *ps, INTFLOAT (*l)[32][2], INTFLOAT (*r)
h_step[1][3] = AAC_MSUB31_V3(H22[1][e+1][b], h[1][3], width);
}
ps->dsp.stereo_interpolate[!PS_BASELINE && ps->enable_ipdopd](
- l[k] + start + 1, r[k] + start + 1,
+ l[k] + 1 + start, r[k] + 1 + start,
h, h_step, stop - start);
}
}