Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 8ff36d74 authored by Robert Shih's avatar Robert Shih Committed by android-build-merger
Browse files

AACExtractor: check bounds during seek am: 07905810 am: a896e5b7 am:... 

AACExtractor: check bounds during seek am: 07905810 am: a896e5b7 am: be8e054c am: 42495748 am: 86a97a8d am: 8ffac892 am: 5c2b26a0 am: cd44215f am: aec31ed3 am: 33890805 am: e3e23089 am: f24336a7 am: 4074f23f
am: 8ca24ea1

Change-Id: I1a24b78f9bfb8a6520b497371f3318b4d0039332
parents f6254341 8ca24ea1

media/extractors/aac/AACExtractor.cpp

+4 −0
Original line number Diff line number Diff line
@@ -288,6 +288,10 @@ status_t AACSource::read( 
    if (options && options->getSeekTo(&seekTimeUs, &mode)) {

        if (mFrameDurationUs > 0) {

            int64_t seekFrame = seekTimeUs / mFrameDurationUs;

            if (seekFrame < 0 || seekFrame >= (int64_t)mOffsetVector.size()) {

                android_errorWriteLog(0x534e4554, "70239507");

                return ERROR_MALFORMED;

            }

            mCurrentTimeUs = seekFrame * mFrameDurationUs;



            mOffset = mOffsetVector.itemAt(seekFrame);