tree a36c2c6d46b210e85a2b5573e125ad85dcffec5e
parent c4c8ea3c868dd3f27a755bf71788afd9d6cf5ea1
author Manisha Jajoo <manisha.jajoo@ittiam.com> 1627061630 +0530
committer Wonsik Kim <wonsik@google.com> 1632720268 -0700

C2SoftMp3Dec: fix OOB write in output buffer

outputFrameSize, calOutSize and outSize are calculated at 8bit level
However, the library expects outputFrameSize in int16 samples.
One of the initialization of outputFrameSize was in bytes.
This is now corrected.

Test: clusterfuzz generated poc in bug
Test: atest android.mediav2.cts.CodecDecoderTest
Test: atest VtsHalMediaC2V1_0TargetAudioDecTest

Bug: 193363621

Change-Id: Iac62c4e9d77e7f95f2c692f5ea236e7a5c536dcb