Menu

Possible Out of Bounds Access in mfcc/dct

2017-10-09
2023-07-25
  • Scott Guthery

    Scott Guthery - 2017-10-09

    The routine mfcc in mfcc.c creates a buffer of 27 (n+1) doubles called fb. It sends fb+1 to dct as dct's argument in. n is also sent to dct as dct's argument size. dct proceeds to access in[k+size] where k is going from 0 to size. It would seem that dct is accessing values beyond the end of fb, namely fb[26] through fb[51].

    Or?

    Thanks in advance for any insight.

    Cheers, Scott

     
  • Takenori Yoshimura

    Thank you for your report.
    The bug seems to be fixed in the ticket below.
    https://sourceforge.net/p/sp-tk/bugs/94/

     

Log in to post a comment.