Fixes: out of array read Fixes: 397731127/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer-5577772965101568
Unified · Split
| @@ -1023,8 +1023,9 @@ static void apply_noise_fill(AACDecContext *ac, SingleChannelElement *sce, · 1022 unmodified lines | |||
| 1023 | } | 1023 | } |
| 1024 | } | 1024 | } |
| 1025 | 1025 | ||
| 1026 | if (band_quantized_to_zero) | 1026 | if (band_quantized_to_zero) { |
| 1027 | sce->sfo[g*ics->max_sfb + sfb] += noise_offset; | 1027 | sce->sfo[g*ics->max_sfb + sfb] = FFMAX(sce->sfo[g*ics->max_sfb + sfb] + noise_offset, -200); |
| 1028 | } | ||
| 1028 | } | 1029 | } |
| 1029 | coef += g_len << 7; | 1030 | coef += g_len << 7; |
| 1030 | } | 1031 | } |