You've already forked FFmpeg
mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2025-08-10 06:10:52 +02:00
avcodec/dca_lbr: Fix off by 1 error in freq check
Fixes out of array read Fixes: 510/clusterfuzz-testcase-5737865715646464 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
@@ -310,7 +310,7 @@ static int parse_tonal(DCALbrDecoder *s, int group)
|
|||||||
break; // End of subframe
|
break; // End of subframe
|
||||||
|
|
||||||
freq += diff - 2;
|
freq += diff - 2;
|
||||||
if (freq >> (5 - group) > s->nsubbands * 4 - 5) {
|
if (freq >> (5 - group) > s->nsubbands * 4 - 6) {
|
||||||
av_log(s->avctx, AV_LOG_ERROR, "Invalid spectral line offset\n");
|
av_log(s->avctx, AV_LOG_ERROR, "Invalid spectral line offset\n");
|
||||||
return -1;
|
return -1;
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user