[FFmpeg-devel] [PATCH] sonic: make sure num_taps is not larger than frame_size

[Andreas Cadhalpun]

On 16.12.2015 21:42, Michael Niedermayer wrote:
> On Wed, Dec 16, 2015 at 07:27:05PM +0100, Andreas Cadhalpun wrote:
>>  sonic.c |    7 +++++++
>>  1 file changed, 7 insertions(+)
>> cfe08ddd0c3dcae138abec66e1e08e628a88b41a  0001-sonic-make-sure-num_taps-channels-is-not-larger-than.patch
>> From fc862d93329111339b020f4a92683ffd75005f9b Mon Sep 17 00:00:00 2001
>> From: Andreas Cadhalpun <Andreas.Cadhalpun at googlemail.com>
>> Date: Tue, 15 Dec 2015 23:43:03 +0100
>> Subject: [PATCH] sonic: make sure num_taps * channels is not larger than
>>  frame_size
>>
>> If that is the case, the loop setting predictor_state in
>> sonic_decode_frame causes out of bounds reads of int_samples, which has
>> only frame_size number of elements.
> 
> LGTM

Pushed.

Best regards,
Andreas