diff options
| author | Andreas Cadhalpun <[email protected]> | 2015-12-15 23:43:03 +0100 |
|---|---|---|
| committer | Andreas Cadhalpun <[email protected]> | 2015-12-17 19:55:09 +0100 |
| commit | 9637c2531f7eb040ad1c3cb46cb40a63dfc77b80 (patch) | |
| tree | 2d7523769f8878c2a898e36356a7a85d4bcfd0e7 /libavformat/asfcrypt.c | |
| parent | c67cf84d7c65fc4894db3133cabbbe0ac0aa1cb0 (diff) | |
sonic: make sure num_taps * channels is not larger than frame_size
If that is the case, the loop setting predictor_state in
sonic_decode_frame causes out of bounds reads of int_samples, which has
only frame_size number of elements.
Reviewed-by: Michael Niedermayer <[email protected]>
Signed-off-by: Andreas Cadhalpun <[email protected]>
Diffstat (limited to 'libavformat/asfcrypt.c')
0 files changed, 0 insertions, 0 deletions