Skip to content

USAN: OOB array access in IFFT

Basic info

Bug description

This is a continuation of (parts of) #1369.

UBSAN reports out-of-bounds access in ifft_rel_fx function:

lib_com/ifft_rel_fx.c:145:26: runtime error: index 192 out of bounds for type 'const Word16 [161]'

This happens in frame 78. Table sincos_t_fx only has size 161.

Screenshot 2025-12-08 at 13.17.22.png

Ways to reproduce

stv714MC48c.wav_Multi_channel_7_1_4_bitrate_switching_from_13_2_kbps_to_512_kbps_48kHz_in_48kHz_out_HOA3_out.192

./IVAS_dec HOA3 48 stv714MC48c.wav_Multi_channel_7_1_4_bitrate_switching_from_13_2_kbps_to_512_kbps_48kHz_in_48kHz_out_HOA3_out.192 out.wav