avcodec: fix aac/ac3 parser bitstream buffer size
authorMichael Niedermayer <michaelni@gmx.at>
Thu, 21 Aug 2014 23:15:57 +0000 (01:15 +0200)
committerMichael Niedermayer <michaelni@gmx.at>
Sun, 7 Sep 2014 11:41:13 +0000 (13:41 +0200)
commit30ffb80dcaf7c5cfde35aafb0caf1c71effc8255
tree7540dfb2541fefd9d2efe240e4c7c4d943d0531a
parent0a64e9a0299b8ded2508be4c6f4949f8f8f57724
avcodec: fix aac/ac3 parser bitstream buffer size

Buffers containing copies of the AAC and AC3 header bits were not padded
before parsing, violating init_get_bits() buffer padding requirement,
leading to potential buffer read overflows.
This change adds FF_INPUT_BUFFER_PADDING_SIZE bytes to the bit buffer
for parsing the header in each of aac_parser.c and ac3_parser.c.

Based on patch by: Matt Wolenetz <wolenetz@chromium.org>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit fccd85b9f30525f88692f53134eba41f1f2d90db)

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavcodec/aac_parser.c
libavcodec/ac3_parser.c