Re: [FFmpeg-devel] [PATCH] sonic: make sure num_taps is not larger than frame_size

2015-12-17 Thread Andreas Cadhalpun
On 16.12.2015 21:42, Michael Niedermayer wrote: > On Wed, Dec 16, 2015 at 07:27:05PM +0100, Andreas Cadhalpun wrote: >> sonic.c |7 +++ >> 1 file changed, 7 insertions(+) >> cfe08ddd0c3dcae138abec66e1e08e628a88b41a >> 0001-sonic-make-sure-num_taps-channels-is-not-larger-than.patch >>

Re: [FFmpeg-devel] [PATCH] sonic: make sure num_taps is not larger than frame_size

2015-12-16 Thread Michael Niedermayer
On Wed, Dec 16, 2015 at 07:27:05PM +0100, Andreas Cadhalpun wrote: > On 16.12.2015 02:08, Michael Niedermayer wrote: > > On Tue, Dec 15, 2015 at 11:50:21PM +0100, Andreas Cadhalpun wrote: > >> If that is the case, the loop setting predictor_state in > >> sonic_decode_frame causes out of bounds

Re: [FFmpeg-devel] [PATCH] sonic: make sure num_taps is not larger than frame_size

2015-12-16 Thread Andreas Cadhalpun
On 16.12.2015 02:08, Michael Niedermayer wrote: > On Tue, Dec 15, 2015 at 11:50:21PM +0100, Andreas Cadhalpun wrote: >> If that is the case, the loop setting predictor_state in >> sonic_decode_frame causes out of bounds reads of int_samples, which has >> only frame_size number of elements. >> >>

[FFmpeg-devel] [PATCH] sonic: make sure num_taps is not larger than frame_size

2015-12-15 Thread Andreas Cadhalpun
If that is the case, the loop setting predictor_state in sonic_decode_frame causes out of bounds reads of int_samples, which has only frame_size number of elements. Signed-off-by: Andreas Cadhalpun --- libavcodec/sonic.c | 7 +++ 1 file changed, 7

Re: [FFmpeg-devel] [PATCH] sonic: make sure num_taps is not larger than frame_size

2015-12-15 Thread Michael Niedermayer
On Tue, Dec 15, 2015 at 11:50:21PM +0100, Andreas Cadhalpun wrote: > If that is the case, the loop setting predictor_state in > sonic_decode_frame causes out of bounds reads of int_samples, which has > only frame_size number of elements. > > Signed-off-by: Andreas Cadhalpun