commit 8972e93edd448c378e0cc099a0fbe25b64295a64
author Jean-Michel Trivi <jmtrivi@google.com> Thu Mar 07 14:16:05 2019 -0800
committer Jean-Michel Trivi <jmtrivi@google.com> Thu Mar 07 14:16:05 2019 -0800
tree fe5a823a7c6aa1441ae5f62a6decc65b3884927b
parent 3e8d8ba558798b1052aec831294aa86ca476bec3

libSBRdec: prevent OOB access

In generateFixFixOnly() check validity of  index before accessing
  SBR decoder envolope tables.

Bug: 112052062
Test: see bug
Change-Id: Icd7ec3807eea9ef8417dba7383f361101becc4f2

libSBRdec/src/env_extr.cpp

diff --git a/libSBRdec/src/env_extr.cpp b/libSBRdec/src/env_extr.cpp
index c72a7b6..5b7a0b1 100644
--- a/libSBRdec/src/env_extr.cpp
+++ b/libSBRdec/src/env_extr.cpp
@@ -1152,6 +1152,10 @@
   int nEnv, i, tranIdx;
   const int *pTable;
 
+  if (tranPosInternal >= numberTimeSlots) {
+    return 0;
+  }
+
   switch (numberTimeSlots) {
     case 8:
       pTable = FDK_sbrDecoder_envelopeTable_8[tranPosInternal];