)]}'
{
  "commit": "c516539a202b08cda8569a9e58c9dc6097450cbe",
  "tree": "87d9a1c6b5f8d8e487e87ffb0e8880392bede5da",
  "parents": [
    "b81f869de3f7c5b6395606d5f36cef57987eae8f"
  ],
  "author": {
    "name": "Fraunhofer IIS FDK",
    "email": "audio-fdk@iis.fraunhofer.de",
    "time": "Mon Jul 06 15:12:34 2020 -0700"
  },
  "committer": {
    "name": "Jean-Michel Trivi",
    "email": "jmtrivi@google.com",
    "time": "Thu Jul 09 08:56:14 2020 -0700"
  },
  "message": "Fix heap buffer overflow in sbrDecoder_AssignQmfChannels2SbrChannels().\n\nIn the bug the SBR decoder has already set up 9 channels and tries to\nallocate one more channel. The assignment of the QMF channels to SBR\nchannels fails since the QMF domain manages only 8+1 channels instead\nof 10 channels as reqeusted by SBR.\nHere we have added a check in sbrDecoder_InitElement() which will\nreturn with a parse error in case additional SBR channels would exceed\nthe maximum number of SBR channels. This solves the potential heap\nbuffer overflow.\n\nBug: 158762825\nTest: atest DecoderTestAacDrc DecoderTestAacFormat DecoderTestXheAac\nMerged-In: I0150ac6d5a47ffce883010f531928656eebc619e\nChange-Id: I8569a15214707ab622e986b34b4b917251495662\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "e2455da7065f77bceb52b585173ee47c8c235289",
      "old_mode": 33188,
      "old_path": "libSBRdec/src/sbrdecoder.cpp",
      "new_id": "45712b5e6edea6848b2a852955257bc0d17354a6",
      "new_mode": 33188,
      "new_path": "libSBRdec/src/sbrdecoder.cpp"
    }
  ]
}