Fix out of bound reads in the QDM2 decoder.

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fix out of bound reads in the QDM2 decoder.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
491eaf35 · Laurent Aimar · Michael Niedermayer · 346876ec · 491eaf35
Commit 491eaf35 authored Sep 30, 2011 by Laurent Aimar Committed by Michael Niedermayer Oct 01, 2011
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

qdm2.c libavcodec/qdm2.c +2 -0

No files found.
--- a/libavcodec/qdm2.c
+++ b/libavcodec/qdm2.c
@@ -1354,6 +1354,8 @@ static void qdm2_fft_decode_tones (QDM2Context *q, int duration, GetBitContext *
            return;

        local_int_14 = (offset >> local_int_8);
+        if (local_int_14 >= FF_ARRAY_ELEMS(fft_level_index_table))
+            return;

        if (q->nb_channels > 1) {
            channel = get_bits1(gb);