From 6d5b0092678b2a95dfe209a207550bd2fe9ef646 Mon Sep 17 00:00:00 2001
From: Alex Converse <alex.converse@gmail.com>
Date: Tue, 11 Dec 2012 17:26:10 -0800
Subject: [PATCH] aacdec: Fix an off-by-one overwrite when switching to LTP
 profile from MAIN.

Found-by: pawlkt
CC: libav-stable@libav.org
---
 libavcodec/aacdec.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavcodec/aacdec.c b/libavcodec/aacdec.c
index f3e9be4aa3..d10a482cad 100644
--- a/libavcodec/aacdec.c
+++ b/libavcodec/aacdec.c
@@ -2003,7 +2003,7 @@ static void apply_tns(float coef[1024], TemporalNoiseShaping *tns,
     int w, filt, m, i;
     int bottom, top, order, start, end, size, inc;
     float lpc[TNS_MAX_ORDER];
-    float tmp[TNS_MAX_ORDER];
+    float tmp[TNS_MAX_ORDER + 1];
 
     for (w = 0; w < ics->num_windows; w++) {
         bottom = ics->num_swb;