Skip to content

GitLab

Open
Created by Roman@hamst

silk_LPC_inverse_pred_gain_neon methods reads memory outside of the intended buffer

The problem connected with attempt to read data outside of the intended buffer in method silk_LPC_inverse_pred_gain_neon.

Buffer of length MAX_LPC_ORDER (=16) is placed in silk_find_LPC_FIX stack:

opus_int16   a_tmp_Q12[ MAX_LPC_ORDER ];

Attempt to read the buffer outside boundaries in silk_LPC_inverse_pred_gain_neon

t0_s16x8 = vld1q_s16( A_Q12 +  0 );
t1_s16x8 = vld1q_s16( A_Q12 +  8 );
t2_s16x8 = vld1q_s16( A_Q12 + 16 );

Backtrace of methods silk_LPC_inverse_pred_gain_neon silk_NLSF2A silk_find_LPC_FIX