Closed Bug 876207 Opened 11 years ago Closed 11 years ago

WebAudio heap-buffer-overflow crash [@mozilla::AudioBlockCopyChannelWithScale]

Categories

(Core :: Web Audio, defect)

x86_64
macOS
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 876118

People

(Reporter: posidron, Unassigned)

References

Details

(4 keywords, Whiteboard: [blocking-webaudio-])

Attachments

(2 files)

Attached file testcase
./content/media/AudioNodeEngine.cpp:64

void
AudioBlockCopyChannelWithScale(const float* aInput,
                               float aScale,
                               float* aOutput)
{
  if (aScale == 1.0f) {
*   memcpy(aOutput, aInput, WEBAUDIO_BLOCK_SIZE*sizeof(float));
[...]


Tested with m-i changeset: 132982:ce25da24ba1c
Attached file callstack
Dupe of bug 876118.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → DUPLICATE
Mass moving Web Audio bugs to the Web Audio component.  Filter on duckityduck.
Component: Video/Audio → Web Audio
Whiteboard: [blocking-webaudio-]
Group: core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: