From 89de2f0de1a41349fe827c00c8f52ca3c12594ad Mon Sep 17 00:00:00 2001 From: Lynne Date: Sun, 16 Jun 2024 10:22:25 +0200 Subject: [PATCH] aacdec_ac: fix an overread Fixes reading state->last[i + 1] in ff_aac_ac_get_context for the last array member. --- libavcodec/aac/aacdec_ac.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavcodec/aac/aacdec_ac.h b/libavcodec/aac/aacdec_ac.h index 0b98c0f0d9..b8d4ade4c6 100644 --- a/libavcodec/aac/aacdec_ac.h +++ b/libavcodec/aac/aacdec_ac.h @@ -25,7 +25,7 @@ #include "libavcodec/get_bits.h" typedef struct AACArithState { - uint8_t last[512 /* 2048 / 4 */]; + uint8_t last[512 /* 2048 / 4 */ + 1]; int last_len; uint8_t cur[4]; uint16_t state_pre;