Commit 7df8af63 authored by Francesco Lavra's avatar Francesco Lavra Committed by Vitor Sessak

Fix reading beyond buffer end on RA144Context.lpc_tables.

Patch by Francesco Lavra (francescolavra -at- interfree -dot- it)

Originally committed as revision 21796 to svn://svn.ffmpeg.org/ffmpeg/trunk
parent f2a4f12c
......@@ -219,7 +219,7 @@ static void int_to_int16(int16_t *out, const int *inp)
{
int i;
for (i=0; i < 30; i++)
for (i=0; i < 10; i++)
*out++ = *inp++;
}
......@@ -276,7 +276,7 @@ static int interp(RA144Context *ractx, int16_t *out, int a,
// Interpolate block coefficients from the this frame's forth block and
// last frame's forth block.
for (i=0; i<30; i++)
for (i=0; i<10; i++)
out[i] = (a * ractx->lpc_coef[0][i] + b * ractx->lpc_coef[1][i])>> 2;
if (eval_refl(work, out, ractx->avctx)) {
......@@ -297,7 +297,7 @@ static int ra144_decode_frame(AVCodecContext * avctx, void *vdata,
int buf_size = avpkt->size;
static const uint8_t sizes[10] = {6, 5, 5, 4, 4, 3, 3, 3, 3, 2};
unsigned int refl_rms[4]; // RMS of the reflection coefficients
uint16_t block_coefs[4][30]; // LPC coefficients of each sub-block
uint16_t block_coefs[4][10]; // LPC coefficients of each sub-block
unsigned int lpc_refl[10]; // LPC reflection coefficients of the frame
int i, j;
int16_t *data = vdata;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment