# HG changeset patch # User alexc # Date 1272668924 0 # Node ID 7f301b81b503cc9a29a464401cc325408af39f3e # Parent 53584d5f86b88a90cda4e673e301cc71b8f77cd5 Move the SBR patch count check to prevent overwrites. Thanks to Chromium. diff -r 53584d5f86b8 -r 7f301b81b503 aacsbr.c --- a/aacsbr.c Fri Apr 30 22:42:52 2010 +0000 +++ b/aacsbr.c Fri Apr 30 23:08:44 2010 +0000 @@ -519,6 +519,15 @@ odd = (sb + sbr->k[0]) & 1; } + // Requirements (14496-3 sp04 p205) sets the maximum number of patches to 5. + // After this check the final number of patches can still be six which is + // illegal however the Coding Technologies decoder check stream has a final + // count of 6 patches + if (sbr->num_patches > 5) { + av_log(ac->avccontext, AV_LOG_ERROR, "Too many patches: %d\n", sbr->num_patches); + return -1; + } + sbr->patch_num_subbands[sbr->num_patches] = FFMAX(sb - usb, 0); sbr->patch_start_subband[sbr->num_patches] = sbr->k[0] - odd - sbr->patch_num_subbands[sbr->num_patches]; @@ -536,13 +545,6 @@ if (sbr->patch_num_subbands[sbr->num_patches-1] < 3 && sbr->num_patches > 1) sbr->num_patches--; - // Requirements (14496-3 sp04 p205) sets the maximum number of patches to 5 - // However the Coding Technologies decoder check uses 6 patches - if (sbr->num_patches > 6) { - av_log(ac->avccontext, AV_LOG_ERROR, "Too many patches: %d\n", sbr->num_patches); - return -1; - } - return 0; }