Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 6830fb66 authored by Neelkamal Semwal's avatar Neelkamal Semwal
Browse files

m4v_h263: Fix integer-overflow in idct_vca.cpp 

Bug: 165817738

Test: POC in bug description

Change-Id: Ic3710ea89174f50aaf47a22f58fa99703a089261
parent 5381d98c

media/libstagefright/codecs/m4v_h263/dec/src/idct_vca.cpp

+3 −0
Original line number Diff line number Diff line
@@ -37,6 +37,7 @@ void idctcol0(int16 *) 
    return ;

}



__attribute__((no_sanitize("signed-integer-overflow")))

void idctrow1(int16 *blk, uint8 *pred, uint8 *dst, int width)

{

    /* shortcut */
@@ -156,6 +157,7 @@ void idctrow2(int16 *blk, uint8 *pred, uint8 *dst, int width) 
    return ;

}



__attribute__((no_sanitize("signed-integer-overflow")))

void idctcol2(int16 *blk)

{

    int32 x0, x1, x3, x5, x7;//, x8;
@@ -256,6 +258,7 @@ void idctrow3(int16 *blk, uint8 *pred, uint8 *dst, int width) 
    return ;

}



__attribute__((no_sanitize("signed-integer-overflow")))

void idctcol3(int16 *blk)

{

    int32 x0, x1, x2, x3, x4, x5, x6, x7, x8;