OSDN Git Service

aacdec: add decode_channel_map overread check
authorReimar Döffinger <Reimar.Doeffinger@gmx.de>
Sat, 7 May 2011 15:49:42 +0000 (17:49 +0200)
committerReimar Döffinger <Reimar.Doeffinger@gmx.de>
Sat, 7 May 2011 16:08:46 +0000 (18:08 +0200)
commit6fd00e9dd94ac3aecf4fa14ca6fa23c395215ac9
treebfe247ef8b130f84498216d3718dfdfaa2aebac5
parent5631729c3de589b45498af5272b47b0792ca07d4
aacdec: add decode_channel_map overread check

All decode_channel_map calls together can easily read
more data than the amount of padding available.
Thus below patch adds an input length check before reading them.
Fixes some invalid reads with sample from
http://bugzilla.mplayerhq.hu/show_bug.cgi?id=1138
libavcodec/aacdec.c