Author: superdump Date: Wed Jul 30 22:47:25 2008 New Revision: 2943 Log: Prevent security issues for invalid values being written to the context and later used for max_sfb and num_swb Modified: aac/aac.c Modified: aac/aac.c ============================================================================== --- aac/aac.c (original) +++ aac/aac.c Wed Jul 30 22:47:25 2008 @@ -998,6 +998,8 @@ static int decode_ics_info(AACContext * av_log(ac->avccontext, AV_LOG_ERROR, "Number of scalefactor bands in group (%d) exceeds limit (%d).\n", ics->max_sfb, ics->num_swb); + ics->max_sfb = 0; + ics->num_swb = 0; return -1; }