Skip to content
Snippets Groups Projects
Commit 747378a4 authored by Timothy B. Terriberry's avatar Timothy B. Terriberry Committed by Jean-Marc Valin
Browse files

Fix (unexploitable) buffer overrun when _m=1 during the cwrs table init, as

reported by Bjoern Rasmussen.
parent 6db6cbd4
No related branches found
No related tags found
No related merge requests found
......@@ -217,7 +217,8 @@ celt_uint32_t ncwrs_u32(int _n,int _m,celt_uint32_t *_u){
k=2;
do _u[k]=(k<<1)-1;
while(++k<len);
for(k=2;k<_n;k++)unext32(_u+2,_m,(k<<1)+1);
for(k=2;k<_n;k++)
unext32(_u+1,_m+1,1);
}
else{
celt_uint32_t um1;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment