1
0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2024-12-23 12:43:46 +02:00

avfilter/af_tremolo: fix heap-buffer overflow

Fixes #8317
This commit is contained in:
Paul B Mahol 2019-10-19 19:34:47 +02:00
parent 26876fdb5e
commit 58bb9d3a3a

View File

@ -28,6 +28,7 @@ typedef struct TremoloContext {
double freq; double freq;
double depth; double depth;
double *table; double *table;
int table_size;
int index; int index;
} TremoloContext; } TremoloContext;
@ -72,7 +73,7 @@ static int filter_frame(AVFilterLink *inlink, AVFrame *in)
dst += channels; dst += channels;
src += channels; src += channels;
s->index++; s->index++;
if (s->index >= inlink->sample_rate / s->freq) if (s->index >= s->table_size)
s->index = 0; s->index = 0;
} }
@ -125,11 +126,12 @@ static int config_input(AVFilterLink *inlink)
const double offset = 1. - s->depth / 2.; const double offset = 1. - s->depth / 2.;
int i; int i;
s->table = av_malloc_array(inlink->sample_rate / s->freq, sizeof(*s->table)); s->table_size = inlink->sample_rate / s->freq;
s->table = av_malloc_array(s->table_size, sizeof(*s->table));
if (!s->table) if (!s->table)
return AVERROR(ENOMEM); return AVERROR(ENOMEM);
for (i = 0; i < inlink->sample_rate / s->freq; i++) { for (i = 0; i < s->table_size; i++) {
double env = s->freq * i / inlink->sample_rate; double env = s->freq * i / inlink->sample_rate;
env = sin(2 * M_PI * fmod(env + 0.25, 1.0)); env = sin(2 * M_PI * fmod(env + 0.25, 1.0));
s->table[i] = env * (1 - fabs(offset)) + offset; s->table[i] = env * (1 - fabs(offset)) + offset;