From 7df8af6385834e58858779ed2fe85c0ce6b2ee1a Mon Sep 17 00:00:00 2001 From: Francesco Lavra Date: Sat, 13 Feb 2010 17:42:58 +0000 Subject: Fix reading beyond buffer end on RA144Context.lpc_tables. Patch by Francesco Lavra (francescolavra -at- interfree -dot- it) Originally committed as revision 21796 to svn://svn.ffmpeg.org/ffmpeg/trunk --- libavcodec/ra144.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'libavcodec/ra144.c') diff --git a/libavcodec/ra144.c b/libavcodec/ra144.c index 8fae69de35..04eb955dcb 100644 --- a/libavcodec/ra144.c +++ b/libavcodec/ra144.c @@ -219,7 +219,7 @@ static void int_to_int16(int16_t *out, const int *inp) { int i; - for (i=0; i < 30; i++) + for (i=0; i < 10; i++) *out++ = *inp++; } @@ -276,7 +276,7 @@ static int interp(RA144Context *ractx, int16_t *out, int a, // Interpolate block coefficients from the this frame's forth block and // last frame's forth block. - for (i=0; i<30; i++) + for (i=0; i<10; i++) out[i] = (a * ractx->lpc_coef[0][i] + b * ractx->lpc_coef[1][i])>> 2; if (eval_refl(work, out, ractx->avctx)) { @@ -297,7 +297,7 @@ static int ra144_decode_frame(AVCodecContext * avctx, void *vdata, int buf_size = avpkt->size; static const uint8_t sizes[10] = {6, 5, 5, 4, 4, 3, 3, 3, 3, 2}; unsigned int refl_rms[4]; // RMS of the reflection coefficients - uint16_t block_coefs[4][30]; // LPC coefficients of each sub-block + uint16_t block_coefs[4][10]; // LPC coefficients of each sub-block unsigned int lpc_refl[10]; // LPC reflection coefficients of the frame int i, j; int16_t *data = vdata; -- cgit v1.2.3