summaryrefslogtreecommitdiffstats
path: root/libFLAC/stream_decoder.c
Commit message (Collapse)AuthorAgeFilesLines
* Merge tag 'android-6.0.1_r66' into HEADJessica Wagantall2016-09-071-1/+3
|\ | | | | | | | | | | | | Android 6.0.1 release 66 # gpg: Signature made Tue 06 Sep 2016 09:26:16 AM PDT using DSA key ID 9AB10E78 # gpg: Can't check signature: public key not found
| * src/libFLAC/stream_decoder.c : Fix NULL de-reference.Erik de Castro Lopo2016-07-211-1/+3
| | | | | | | | | | | | | | | | NULL de-reference can really only happen on a malformed file. Found using afl (http://lcamtuf.coredump.cx/afl/). Bug: 27211885 Change-Id: Iad7ced634d417df475050c8f379e0e95ec36b115
* | Merge tag 'android-6.0.1_r43' into HEADJessica Wagantall2016-05-031-0/+1
|\| | | | | | | | | | | | | Ticket: CYNGNOS-2373 Android 6.0.1 release 43 (MOB30J) Change-Id: I7a1ea6974021d9292c71518fc3cccbe3cba8515b
| * Avoid free-before-initialize vulnerability in heapRobert Shih2016-03-251-0/+1
| | | | | | | | | | Bug: 27211885 Change-Id: Ib9c93bd9ffdde2a5f8d31a86f06e267dc9c152db
| * Revert "libFLAC/stream_decoder.c : Fail safely to avoid a heap overflow."Robert Shih2015-08-211-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 1d948ef7391c9e484658ba024d74433f4df37b3b. The reverted patch was cherry picked from Xiph commit fcf0ba0. However, the last version update in external/flac, which pulled in changes up to Xiph commit 775eb93, already picked up fcf0ba0. fcf0ba0 applied cleanly for the second time because another Xiph commit b4b2910, which was also picked up in the previous update to external/flac, reverted fcf0ba0. Bug: 23238405 Change-Id: Id3cd66048f78d3bfb5324144bcbfa50740f74d69
| * libFLAC/stream_decoder.c : Fail safely to avoid a heap overflow.Erik de Castro Lopo2015-08-191-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | A file provided by the reporters caused the stream decoder to write to un-allocated heap space resulting in a segfault. The solution is to error out (by returning false from read_residual_partitioned_rice_()) instead of trying to continue to decode. Fixes: CVE-2014-9028 Reported-by: Michele Spagnuolo, Google Security Team <mikispag@google.com> Bug: 23238405 Change-Id: I5c000e3d85d884a92208efebe53aa6edaef8829e
| * libFLAC: merge master from XiphRobert Shih2015-02-251-161/+166
| | | | | | | | | | | | | | | | | | | | remote: https://git.xiph.org/flac.git commit: 775eb93 Bug: 18872897 Bug: 18910747 Change-Id: I6e450e44c96b97c3323e428b9e6d420422f24a4e (cherry picked from commit 31e4f3166a91a2ebb34f643787122a638d9f1471)
* | Noise and sometimes tombstone crash observed while seeking FLAC content ↵guruprasadX, pawse2015-11-231-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | during playback This patch resolves two issues: 1. Segmentation fault while seeking. 2. Noise during seek. The rootcause of both the above issue are same. Issue happens due to memory corruption of FLAC write buffer during seek. Due to this incorrect address we always observe noise during seek and sometimes the memory read causes seg fault whenever the memory access goes beyond the valid range. Change-Id: If76ca4ab614a02f8b324fc51684d5d9cf25073c8 Signed-off-by: guruprasadX, pawse <guruprasadx.pawse@intel.com> Signed-off-by: Mazhar <mazharx.sameullah@intel.com>
* | libFLAC: merge master from XiphRobert Shih2015-01-061-161/+166
|/ | | | | | | | | remote: https://git.xiph.org/flac.git commit: 775eb93 Bug: 18872897 Bug: 18910747 Change-Id: I6e450e44c96b97c3323e428b9e6d420422f24a4e
* Add flag to remove MD5 hooks from decoderKenny Root2009-11-081-0/+8
|
* libFLAC 1.2.1Kenny Root2009-11-081-0/+3387