| commit | 44bed4b30276059a16647a08c7746b6e067612b6 | |
| author | Lyndon Brown <jnqnfe@gmail.com> | |
| Wed, 27 Dec 2017 05:41:01 +0000 (27 05:41 +0000) | ||
| committer | Rémi Denis-Courmont <remi@remlab.net> | |
| Sun, 7 Jan 2018 13:22:35 +0000 (7 15:22 +0200) | ||
| tree | c6841f3505cac21ec42fcf89f873aaa0ba3716b0 | treesnapshot (tar.gz zip) |
| parent | 8e564ce5b05a8098239bd7fd04ff2ca6e4bb4983 | commitdiff |
codec/araw: Fix Dat12 decode buffer overflow
Dat12 decode is a 12bit=>16bit conversion, and the output buffer is sized
based upon 16bit samples. However, the decoder function casts the output
buffer pointer to a 32bit type, meaning that half of the output thus ends
up being written past the end of the buffer.
Signed-off-by: Rémi Denis-Courmont <remi@remlab.net>
Dat12 decode is a 12bit=>16bit conversion, and the output buffer is sized
based upon 16bit samples. However, the decoder function casts the output
buffer pointer to a 32bit type, meaning that half of the output thus ends
up being written past the end of the buffer.
Signed-off-by: Rémi Denis-Courmont <remi@remlab.net>
| modules/codec/araw.c | diffblobblamehistory |