aboutsummaryrefslogtreecommitdiffstats
path: root/libavcodec/aacsbr.c
diff options
context:
space:
mode:
authorMichael Niedermayer <michaelni@gmx.at>2012-01-12 22:19:34 +0100
committerMichael Niedermayer <michaelni@gmx.at>2012-01-12 22:19:40 +0100
commitf9c9ee445f7cb46be1550fdf809626b997f814ac (patch)
tree0048c563f1ee8b60fdc3cfd8611c4c550817e551 /libavcodec/aacsbr.c
parentc0cbf3af0188d06a11c74b3ab2402de1c248a76b (diff)
parent8935e7474ada9f18e9c21ec3a0a1706040e7b3be (diff)
downloadffmpeg-f9c9ee445f7cb46be1550fdf809626b997f814ac.tar.gz
Merge branch 'release/0.8' into release/0.7
* release/0.8: shorten: Fix invalid free() j2kdec: Fix crash in get_qcx j2kdec: Check curtileno for validity atrac3: Fix crash in tonal component decoding. Fixes Ticket780 Bug Found by: cosminamironesei h264: check chroma_format_idc range. Fixes Ticket758 Bug found by: Diana Elena Muscalu aacsbr: Fix memory corruption. Fixes Ticket760 and Ticket761 Bug Found by: Diana Elena Muscalu j2kdec: Fix integer overflow leading to a segfault Fixes Ticket776 Bug found by: Diana Elena Muscalu ws_snd1: Fix wrong samples count and crash. lavfi: add missing check in avfilter_filter_samples() Update Changelog for 0.7.4 release Update RELEASE file for 0.7.4 swscale: fix crash in fast_bilinear code when compiled with -mred-zone. vorbis: An additional defense in the Vorbis codec. vorbisdec: Fix decoding bug with channel handling Merged-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavcodec/aacsbr.c')
-rw-r--r--libavcodec/aacsbr.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/aacsbr.c b/libavcodec/aacsbr.c
index 10b8daf280..866482aac3 100644
--- a/libavcodec/aacsbr.c
+++ b/libavcodec/aacsbr.c
@@ -1185,7 +1185,7 @@ static void sbr_qmf_synthesis(DSPContext *dsp, FFTContext *mdct,
const float *sbr_qmf_window = div ? sbr_qmf_window_ds : sbr_qmf_window_us;
float *v;
for (i = 0; i < 32; i++) {
- if (*v_off == 0) {
+ if (*v_off < 128 >> div) {
int saved_samples = (1280 - 128) >> div;
memcpy(&v0[SBR_SYNTHESIS_BUF_SIZE - saved_samples], v0, saved_samples * sizeof(float));
*v_off = SBR_SYNTHESIS_BUF_SIZE - saved_samples - (128 >> div);