summaryrefslogtreecommitdiff
path: root/libavcodec/aacsbr.c
diff options
context:
space:
mode:
authorAlex Converse <alex.converse@gmail.com>2010-03-09 10:25:42 +0000
committerAlex Converse <alex.converse@gmail.com>2010-03-09 10:25:42 +0000
commited1d112931776f40c5fc759204b79c78dfee5f9a (patch)
treeb20941712998d3cefd7a2ef75e61c54ae6915d3d /libavcodec/aacsbr.c
parent8a9ee4b102a0620984d9963350bb378c778acb9d (diff)
aacsbr: Fail early on illegal envelope counts.
Originally committed as revision 22381 to svn://svn.ffmpeg.org/ffmpeg/trunk
Diffstat (limited to 'libavcodec/aacsbr.c')
-rw-r--r--libavcodec/aacsbr.c26
1 files changed, 14 insertions, 12 deletions
diff --git a/libavcodec/aacsbr.c b/libavcodec/aacsbr.c
index a093dcf006..e6832d93cb 100644
--- a/libavcodec/aacsbr.c
+++ b/libavcodec/aacsbr.c
@@ -628,6 +628,13 @@ static int read_sbr_grid(AACContext *ac, SpectralBandReplication *sbr,
if (ch_data->bs_num_env[1] == 1)
ch_data->bs_amp_res = 0;
+ if (ch_data->bs_num_env[1] > 4) {
+ av_log(ac->avccontext, AV_LOG_ERROR,
+ "Invalid bitstream, too many SBR envelopes in FIXFIX type SBR frame: %d\n",
+ ch_data->bs_num_env[1]);
+ return -1;
+ }
+
ch_data->bs_pointer = 0;
ch_data->bs_freq_res[1] = get_bits1(gb);
@@ -666,6 +673,13 @@ static int read_sbr_grid(AACContext *ac, SpectralBandReplication *sbr,
ch_data->bs_num_rel[1] = get_bits(gb, 2);
ch_data->bs_num_env[1] = ch_data->bs_num_rel[0] + ch_data->bs_num_rel[1] + 1;
+ if (ch_data->bs_num_env[1] > 5) {
+ av_log(ac->avccontext, AV_LOG_ERROR,
+ "Invalid bitstream, too many SBR envelopes in VARVAR type SBR frame: %d\n",
+ ch_data->bs_num_env[1]);
+ return -1;
+ }
+
for (i = 0; i < ch_data->bs_num_rel[0]; i++)
ch_data->bs_rel_bord[0][i] = 2 * get_bits(gb, 2) + 2;
for (i = 0; i < ch_data->bs_num_rel[1]; i++)
@@ -683,18 +697,6 @@ static int read_sbr_grid(AACContext *ac, SpectralBandReplication *sbr,
ch_data->bs_pointer);
return -1;
}
- if (ch_data->bs_frame_class == FIXFIX && ch_data->bs_num_env[1] > 4) {
- av_log(ac->avccontext, AV_LOG_ERROR,
- "Invalid bitstream, too many SBR envelopes in FIXFIX type SBR frame: %d\n",
- ch_data->bs_num_env[1]);
- return -1;
- }
- if (ch_data->bs_frame_class == VARVAR && ch_data->bs_num_env[1] > 5) {
- av_log(ac->avccontext, AV_LOG_ERROR,
- "Invalid bitstream, too many SBR envelopes in VARVAR type SBR frame: %d\n",
- ch_data->bs_num_env[1]);
- return -1;
- }
ch_data->bs_num_noise = (ch_data->bs_num_env[1] > 1) + 1;