On 16.12.2015 21:42, Michael Niedermayer wrote:
> On Wed, Dec 16, 2015 at 07:27:05PM +0100, Andreas Cadhalpun wrote:
>> sonic.c |7 +++
>> 1 file changed, 7 insertions(+)
>> cfe08ddd0c3dcae138abec66e1e08e628a88b41a
>> 0001-sonic-make-sure-num_taps-channels-is-not-larger-than.patch
>> Fro
On Wed, Dec 16, 2015 at 07:27:05PM +0100, Andreas Cadhalpun wrote:
> On 16.12.2015 02:08, Michael Niedermayer wrote:
> > On Tue, Dec 15, 2015 at 11:50:21PM +0100, Andreas Cadhalpun wrote:
> >> If that is the case, the loop setting predictor_state in
> >> sonic_decode_frame causes out of bounds read
On 16.12.2015 02:08, Michael Niedermayer wrote:
> On Tue, Dec 15, 2015 at 11:50:21PM +0100, Andreas Cadhalpun wrote:
>> If that is the case, the loop setting predictor_state in
>> sonic_decode_frame causes out of bounds reads of int_samples, which has
>> only frame_size number of elements.
>>
>> Si
On Tue, Dec 15, 2015 at 11:50:21PM +0100, Andreas Cadhalpun wrote:
> If that is the case, the loop setting predictor_state in
> sonic_decode_frame causes out of bounds reads of int_samples, which has
> only frame_size number of elements.
>
> Signed-off-by: Andreas Cadhalpun
> ---
> libavcodec/so
If that is the case, the loop setting predictor_state in
sonic_decode_frame causes out of bounds reads of int_samples, which has
only frame_size number of elements.
Signed-off-by: Andreas Cadhalpun
---
libavcodec/sonic.c | 7 +++
1 file changed, 7 insertions(+)
diff --git a/libavcodec/sonic
