From: Ronald S. Bultje <rsbultje@gmail.com>
Date: Sun, 2 May 2010 21:52:25 +0000 (+0000)
Subject: Another buffer overflow, fixes issue1758.
X-Git-Tag: v0.6~113
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=1302ccc1a771d6e713a28fbbf70fc6cd6ae93b07;p=platform%2Fupstream%2Flibav.git

Another buffer overflow, fixes issue1758.

Originally committed as revision 23011 to svn://svn.ffmpeg.org/ffmpeg/trunk
---

diff --git a/libavcodec/wmavoice.c b/libavcodec/wmavoice.c
index 088a6d3..4ec17eb 100644
--- a/libavcodec/wmavoice.c
+++ b/libavcodec/wmavoice.c
@@ -697,7 +697,7 @@ static void wiener_denoise(WMAVoiceContext *s, int fcb_type,
         ff_rdft_calc(&s->rdft, coeffs);
         synth_pf[0] *= coeffs[0];
         synth_pf[1] *= coeffs[1];
-        for (n = 1; n < 128; n++) {
+        for (n = 1; n < 64; n++) {
             float v1 = synth_pf[n * 2], v2 = synth_pf[n * 2 + 1];
             synth_pf[n * 2]     = v1 * coeffs[n * 2] - v2 * coeffs[n * 2 + 1];
             synth_pf[n * 2 + 1] = v2 * coeffs[n * 2] + v1 * coeffs[n * 2 + 1];