You've already forked FFmpeg
							
							
				mirror of
				https://github.com/FFmpeg/FFmpeg.git
				synced 2025-10-30 23:18:11 +02:00 
			
		
		
		
	avcodec/ac3dec: Fix: runtime error: index -1 out of bounds for type 'INTFLOAT [2]'
It seems dual mono with a LFE channel is not forbidden Fixes: 1570/clusterfuzz-testcase-minimized-6455337349545984 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
		| @@ -1389,7 +1389,7 @@ static int decode_audio_block(AC3DecodeContext *s, int blk) | ||||
|     for (ch = 1; ch <= s->channels; ch++) { | ||||
|         int audio_channel = 0; | ||||
|         INTFLOAT gain; | ||||
|         if (s->channel_mode == AC3_CHMODE_DUALMONO) | ||||
|         if (s->channel_mode == AC3_CHMODE_DUALMONO && ch <= 2) | ||||
|             audio_channel = 2-ch; | ||||
|         if (s->heavy_compression && s->compression_exists[audio_channel]) | ||||
|             gain = s->heavy_dynamic_range[audio_channel]; | ||||
|   | ||||
		Reference in New Issue
	
	Block a user