diff options
author | Michael Niedermayer <michaelni@gmx.at> | 2012-11-09 20:33:01 +0100 |
---|---|---|
committer | Michael Niedermayer <michaelni@gmx.at> | 2012-11-09 21:05:43 +0100 |
commit | ac7ff0963bf353ffd951ae8d51444b82b7ea69c1 (patch) | |
tree | b91b2feb483584bb0d46484b5f3b912bc93e0634 /libavcodec | |
parent | 623cfc93d9ba5790b9b237ce66123bba9fd6a6c7 (diff) | |
download | ffmpeg-ac7ff0963bf353ffd951ae8d51444b82b7ea69c1.tar.gz |
aacdec: fix temporary array size
Avoids out of array accesses.
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavcodec')
-rw-r--r-- | libavcodec/aacdec.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/aacdec.c b/libavcodec/aacdec.c index b132cbac46..10132bbcd9 100644 --- a/libavcodec/aacdec.c +++ b/libavcodec/aacdec.c @@ -2035,7 +2035,7 @@ static void apply_tns(float coef[1024], TemporalNoiseShaping *tns, int w, filt, m, i; int bottom, top, order, start, end, size, inc; float lpc[TNS_MAX_ORDER]; - float tmp[TNS_MAX_ORDER]; + float tmp[TNS_MAX_ORDER+1]; for (w = 0; w < ics->num_windows; w++) { bottom = ics->num_swb; |