[FFmpeg-cvslog] aacdec_ac: fix an overread

Lynne git at videolan.org
Fri Jun 21 11:50:36 EEST 2024


ffmpeg | branch: master | Lynne <dev at lynne.ee> | Sun Jun 16 10:22:25 2024 +0200| [89de2f0de1a41349fe827c00c8f52ca3c12594ad] | committer: Lynne

aacdec_ac: fix an overread

Fixes reading state->last[i + 1] in ff_aac_ac_get_context for the
last array member.

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=89de2f0de1a41349fe827c00c8f52ca3c12594ad
---

 libavcodec/aac/aacdec_ac.h | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavcodec/aac/aacdec_ac.h b/libavcodec/aac/aacdec_ac.h
index 0b98c0f0d9..b8d4ade4c6 100644
--- a/libavcodec/aac/aacdec_ac.h
+++ b/libavcodec/aac/aacdec_ac.h
@@ -25,7 +25,7 @@
 #include "libavcodec/get_bits.h"
 
 typedef struct AACArithState {
-    uint8_t last[512 /* 2048 / 4 */];
+    uint8_t last[512 /* 2048 / 4 */ + 1];
     int last_len;
     uint8_t cur[4];
     uint16_t state_pre;



More information about the ffmpeg-cvslog mailing list