shithub: opusfile

Info  •  Files  •  Log  •  Branches

Fix a buffer overflow in op_read_stereo().

For multichannel files, this potentially caused writes beyond the
 end of the output buffer provided by the user.

--- a/src/opusfile.c

+++ b/src/opusfile.c

@@ -3052,7 +3052,7 @@

       _nsamples=op_stereo_filter(_of,_src,_nsamples*2,

        _src,_nsamples,_nchannels);

     }

-    op_shaped_dither16(_of,dst,_src,_nsamples,_nchannels);

+    op_shaped_dither16(_of,dst,_src,_nsamples,2);

   }

   return _nsamples;

 }