From 69f62b78915e360a1bcb18fcb7383ab1fa716c57 Mon Sep 17 00:00:00 2001
From: "roman.artiukhin" <bahusdrive@gmail.com>
Date: Tue, 3 Oct 2023 18:36:09 +0300
Subject: Codecs: mp4: Fix seek to end of track

Fix possible crash due to out of bound access.

Fixes FS#13371

Change-Id: I90d28fa89ceb22e6561d33abc5f2b4c7f32d323c
---
 lib/rbcodec/codecs/aac.c  | 2 ++
 lib/rbcodec/codecs/alac.c | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/lib/rbcodec/codecs/aac.c b/lib/rbcodec/codecs/aac.c
index 1f5165ad05..8353f0b1bf 100644
--- a/lib/rbcodec/codecs/aac.c
+++ b/lib/rbcodec/codecs/aac.c
@@ -185,6 +185,8 @@ enum codec_status codec_run(void)
             }
             NeAACDecPostSeekReset(decoder, i);
             ci->seek_complete();
+            if (i >= demux_res.num_sample_byte_sizes)
+                break;
         }
 
         action = CODEC_ACTION_NULL;
diff --git a/lib/rbcodec/codecs/alac.c b/lib/rbcodec/codecs/alac.c
index 0bf354080c..34f447df47 100644
--- a/lib/rbcodec/codecs/alac.c
+++ b/lib/rbcodec/codecs/alac.c
@@ -127,6 +127,8 @@ enum codec_status codec_run(void)
                 set_elapsed_samples(samplesdone);
 
             ci->seek_complete();
+            if (i >= demux_res.num_sample_byte_sizes)
+                break;
         }
 
         /* Request the required number of bytes from the input buffer */
-- 
cgit v1.2.3