Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit a896e5b7 authored by Robert Shih's avatar Robert Shih Committed by android-build-merger
Browse files

AACExtractor: check bounds during seek

am: 07905810

Change-Id: I8d15b4ebb83c4bd2915f981bfa7cb16955fc864b
parents df8c8ecc 07905810
Loading
Loading
Loading
Loading
+4 −0
Original line number Diff line number Diff line
@@ -292,6 +292,10 @@ status_t AACSource::read(
    if (options && options->getSeekTo(&seekTimeUs, &mode)) {
        if (mFrameDurationUs > 0) {
            int64_t seekFrame = seekTimeUs / mFrameDurationUs;
            if (seekFrame < 0 || seekFrame >= (int64_t)mOffsetVector.size()) {
                android_errorWriteLog(0x534e4554, "70239507");
                return ERROR_MALFORMED;
            }
            mCurrentTimeUs = seekFrame * mFrameDurationUs;

            mOffset = mOffsetVector.itemAt(seekFrame);