[FFmpeg-devel] [PATCH] aaccoder: prevent crash of anmr coder

Andreas Cadhalpun andreas.cadhalpun at googlemail.com
Wed Dec 9 22:37:57 CET 2015


On 09.12.2015 21:38, Claudio Freire wrote:
> On Wed, Dec 9, 2015 at 5:29 PM, Claudio Freire <klaussfreire at gmail.com> wrote:
>> On Wed, Dec 9, 2015 at 4:42 PM, Andreas Cadhalpun
>> <andreas.cadhalpun at googlemail.com> wrote:
>>>>> [...]
>>>>>             for (w2 = 0; w2 < sce->ics.group_len[w]; w2++) {
>>>>> [...]
>>>>>             }
>>>
>>> Now we are after the w2-loop and thus:
>>> w2 = sce->ics.group_len[w] = 2
>>>
>>
>>
>> Ah, I see, it's outside the loop!
>>
>> Pushing a fix.
> 
> 
> Seems I cannot push from this computer (I don't have the key at hand).
> 
> So, attached a patch that ought to fix this crash

This fixes the OOB access, so applied and pushed.

Best regards,
Andreas



More information about the ffmpeg-devel mailing list