aacdec_ac: fix an overread

Fixes reading state->last[i + 1] in ff_aac_ac_get_context for the last array member.

Lynne committed 2 years ago

Commit 89de2f01 parent 50e5b781 file · +1 −1Browse files

Unified · Split

@@ -25,7 +25,7 @@ · 24 unmodified lines
25	#include "libavcodec/get_bits.h"	25	#include "libavcodec/get_bits.h"
26		26
27	typedef struct AACArithState {	27	typedef struct AACArithState {
28	uint8_t last[512 /* 2048 / 4 */];	28	uint8_t last[512 /* 2048 / 4 */ + 1];
29	int last_len;	29	int last_len;
30	uint8_t cur[4];	30	uint8_t cur[4];
31	uint16_t state_pre;	31	uint16_t state_pre;

Keyboard shortcuts