atrac3: Fix crash in tonal component decoding.
authorMichael Niedermayer <michaelni@gmx.at>
Sat, 17 Dec 2011 02:18:58 +0000 (03:18 +0100)
committerReinhard Tartler <siretart@tauware.de>
Sun, 1 Apr 2012 16:33:29 +0000 (18:33 +0200)
commitf728ad26f0ec87650d2986a892785c0e2b97d161
treed2c8308fdce6d67eb33bba30d794221c2975cb80
parente676bbb8cfb7401cfc189a88c61e7e7c22557fa7
atrac3: Fix crash in tonal component decoding.

Add a check to avoid writing past the end of the channel_unit.components[]
array.

Bug Found by: cosminamironesei
Fixes CVE-2012-0853
CC: libav-stable@libav.org
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
(cherry picked from commit c509f4f74713b035a06f79cb4d00e708f5226bc5)

Signed-off-by: Reinhard Tartler <siretart@tauware.de>
(cherry picked from commit f43b6e2b1ed47a1254a5d44c700a7fad5e9784be)

Signed-off-by: Reinhard Tartler <siretart@tauware.de>
libavcodec/atrac3.c