From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id 78B484B292 for ; Tue, 2 Jul 2024 21:26:43 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 7542468D971; Wed, 3 Jul 2024 00:26:41 +0300 (EEST) Received: from mail-ej1-f41.google.com (mail-ej1-f41.google.com [209.85.218.41]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 3C98868D929 for ; Wed, 3 Jul 2024 00:26:35 +0300 (EEST) Received: by mail-ej1-f41.google.com with SMTP id a640c23a62f3a-a72b3e1c14cso549944366b.1 for ; Tue, 02 Jul 2024 14:26:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1719955594; x=1720560394; darn=ffmpeg.org; h=subject:date:from:to:message-id:from:to:cc:subject:date:message-id :reply-to; bh=SNl9NRzgn83tkqsg6DVhVBFxnJgtZ+l5/gihMpDaxcg=; b=WTV7t4EWiHMjp2EB8xed8V9EBDHB157kAvOyLFEcEAfsfxd8R8lVfvEyEt91Zyb0NS JmzxLt1jrq6bankO0aiz30UNerE2nJuiQylOaaIchu68w8e5JADgLffAofsnAbeIV90W NHbvvrTJ09TXIpBjTMM4w3U6sSrOyJ7MrTAaNWghUR8pfPM1pXmiyFIwOZGIDlasEEOx cgQPQTJuDCciheDcv+AJoxHI89qr9AqX7DGpJhjwYNEbJgbS6p+V7r+DAM3hc6WcIAyy U9eaWOV7+8+ZUzOmxo8UNrfSl2uQT59XwF/zYhjcpjH4SR9o8B+FhaM9AHr9qvn0Lrpz n6MA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1719955594; x=1720560394; h=subject:date:from:to:message-id:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=SNl9NRzgn83tkqsg6DVhVBFxnJgtZ+l5/gihMpDaxcg=; b=mAfzabzOisLKpNjScE1+1HXn+PItdCPxa0CnFcGycUFVK0qEc51n6ghQrLuE8/f4c8 wnM15HJQdWc4JuOjHWupHw+1Dsrj+WBByM0H9T7Wxufv/KGCDj56/jyyzv76wC+kRd1q PmZq5LfqNwUGTPY6fx4n6GbAIK36OI8Xhs7F00jm/n42FTRhovmTEtm2czdH0Eu3PgsZ Lu8bPw7oMbqUnMElPdQMyR8HpMZ0w8gL7UGB9oF6bcVdULC8O5ZniibCGyRBQGeiT0Al UYPa6EGEwXbBnl9TPEMVPq56/jxkxJkBlbphpNoBtNGW1aP+HBY37H7hawrxC0JRlkNu j0fQ== X-Gm-Message-State: AOJu0Yzu7OWcObSTuDlQbGMBmFLyg/8HM9IqEky3sedMpa0zj4I0ZSiv oYIZZ7V1eW1C8VWUU6hAEXNQ+3crABf3eOXPWSgKMmXYA+rDoz5U49GYDA== X-Google-Smtp-Source: AGHT+IFTaT8IlWiE9unMNF3dnfKyejNV1LZRV0qZY7I1W0PHLPCOHiLd30KqA8yFj2ykPe6NdvJb+w== X-Received: by 2002:a17:907:6d26:b0:a6f:c4d6:4874 with SMTP id a640c23a62f3a-a751444c63amr639755166b.34.1719955594167; Tue, 02 Jul 2024 14:26:34 -0700 (PDT) Received: from localhost (p200300cccf0d6b0015dc1b9b6d5e601e.dip0.t-ipconnect.de. [2003:cc:cf0d:6b00:15dc:1b9b:6d5e:601e]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-a72aaf5a585sm452672766b.52.2024.07.02.14.26.33 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 02 Jul 2024 14:26:33 -0700 (PDT) Message-Id: To: From: "Marvin Scholz" Date: Tue, 2 Jul 2024 23:25:57 +0200 Subject: [FFmpeg-devel] [PATCH] avcodec/aacdec_usac: Fix array size X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: The array in ff_aac_usac_mdst_filt_cur that is passed to that has a size of 7 elements, not 6 and the code in the function accesses the array at index 6, which would be out of bounds if the size was actually 6. Fixes: CID1603196 --- libavcodec/aac/aacdec_usac.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavcodec/aac/aacdec_usac.c b/libavcodec/aac/aacdec_usac.c index 4856c1786b..32b3c534bf 100644 --- a/libavcodec/aac/aacdec_usac.c +++ b/libavcodec/aac/aacdec_usac.c @@ -1134,7 +1134,7 @@ static void complex_stereo_downmix_cur(AACDecContext *ac, ChannelElement *cpe, } } -static void complex_stereo_interpolate_imag(float *im, float *re, const float f[6], +static void complex_stereo_interpolate_imag(float *im, float *re, const float f[7], int len, int factor_even, int factor_odd) { int i = 0; base-commit: e783e45e29e78616debba7f6d1fe6e54dc336496 -- 2.39.3 (Apple Git-146) _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".