d708d1ed11 - platform/frameworks/av

commit: d708d1ed113033cc43422c128f790d16fb4c45ab
[log]
author: Duy Truong <duytruong@google.com>
Fri May 22 03:54:21 2026 -0700
committer: Android Build Coastguard Worker <android-build-coastguard-worker@google.com>
Thu Jul 09 15:38:59 2026 -0700
tree: 367f8543aa5b6ba7a200dc596432a37715d26253
parent: 7a05282afe4230ba4c6d2a162d2ea2237d778c3c [diff]

Fix OOB in DynamicsProcessing MBC band processing

Clamp cutoffFrequency and add bounds checks in MBC loops
to prevent heap out-of-bounds read-modify-write.
The vulnerability allowed an attacker to control the OOB
extent via a crafted cutoffFrequency value.

This change was autogenerated by MendIt (go/androidmendit)

Bug: 505827492
Test: manual compilation and host-side logic test
Flag: EXEMPT BUGFIX
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:5070aaf57af03a314048990fbb53b38e6e0411bb
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:2c5edbe1084b7b2196cba69d6628472b5c558e84
Merged-In: I67d9a1f9aab82141d9cae2f04eb2b7757171730e
Change-Id: I67d9a1f9aab82141d9cae2f04eb2b7757171730e

3 files changed

tree: 367f8543aa5b6ba7a200dc596432a37715d26253