jensandClaude Sonnet 5
d713ca50bb
Found while building tools/testhost's regression suite for the Critical #5 block-size fix: VCF_CalcCoeff_LPF/_HPF/_BPF advance the coefficient pointer once per (sample, filter-section) pair, but a 4th-order filter uses FILTER_MAX_ORDER/2 = 2 cascaded 2nd-order sections per sample. VCF_SetBufsize only allocated pCoef with bufsize entries, not bufsize*sections, so any host block between 4097 and 8192 samples with a 4th-order filter selected wrote past the allocation. Confirmed with AddressSanitizer before the fix: heap-buffer-overflow, WRITE of size 8, exactly 8 bytes past a 393216-byte (8192 x sizeof(vcf_coef_t)) allocation. Fixed by sizing pCoef for the worst case. Re-verified with ASan across blockSize 4097/8192/16384/20000 - zero errors after the fix. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011dhtwRLARk4eiPngcQykLJ