AMRWB: Add bounds check for mode in pvDecoder_AmrWb()

Bug: 151845676 Test: poc in bug Change-Id: Iec7793ea8701da36efae9d4e163bfb91f74fc994
4 years ago · a27e70cdba
parent 02d69c15b6
commit a27e70cdba
1 changed files with 4 additions and 1 deletions
--- a/media/libstagefright/codecs/amrwb/src/pvamrwbdecoder.cpp
+++ b/media/libstagefright/codecs/amrwb/src/pvamrwbdecoder.cpp
@ -337,7 +337,10 @@ int32 pvDecoder_AmrWb(
    st = (Decoder_State *) spd_state;

    /* mode verification */
-
+    if (mode < 0 || mode >= NUM_OF_MODES)
+    {
+        return (-1);
+    }
    nb_bits = AMR_WB_COMPRESSED[mode];

    *frame_length = AMR_WB_PCM_FRAME;