On 16.12.2015 21:42, Michael Niedermayer wrote: > On Wed, Dec 16, 2015 at 07:27:05PM +0100, Andreas Cadhalpun wrote: >> sonic.c | 7 +++++++ >> 1 file changed, 7 insertions(+) >> cfe08ddd0c3dcae138abec66e1e08e628a88b41a >> 0001-sonic-make-sure-num_taps-channels-is-not-larger-than.patch >> From fc862d93329111339b020f4a92683ffd75005f9b Mon Sep 17 00:00:00 2001 >> From: Andreas Cadhalpun <andreas.cadhal...@googlemail.com> >> Date: Tue, 15 Dec 2015 23:43:03 +0100 >> Subject: [PATCH] sonic: make sure num_taps * channels is not larger than >> frame_size >> >> If that is the case, the loop setting predictor_state in >> sonic_decode_frame causes out of bounds reads of int_samples, which has >> only frame_size number of elements. > > LGTM
Pushed. Best regards, Andreas _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org http://ffmpeg.org/mailman/listinfo/ffmpeg-devel
