Fixes: index 5 out of bounds for type 'uint8_t [5]' Fixes: 377748135/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer-5167109774049280
Showing the changes to libavcodec (1 of 1 file). Show all
Unified · Split
| @@ -599,6 +599,7 @@ static int sbr_make_f_derived(AACDecContext *ac, SpectralBandReplication *sbr) · 598 unmodified lines | |||
| 599 | 599 | ||
| 600 | if (sbr->n_q > 5) { | 600 | if (sbr->n_q > 5) { |
| 601 | av_log(ac->avctx, AV_LOG_ERROR, "Too many noise floor scale factors: %d\n", sbr->n_q); | 601 | av_log(ac->avctx, AV_LOG_ERROR, "Too many noise floor scale factors: %d\n", sbr->n_q); |
| 602 | sbr->n_q = 1; | ||
| 602 | return -1; | 603 | return -1; |
| 603 | } | 604 | } |
| 604 | 605 | ||