From 9c3531b97d24fdc9507745fca2afebf82b2d78a0 Mon Sep 17 00:00:00 2001
From: Shashank Pathmudi <100897@ittiam.com>
Date: Wed, 21 Jan 2026 10:28:27 +0530
Subject: [PATCH] Fix for integer overflow issue in
 ixheaacd_apply_ana_hyb_filt_bank_create_x_res

Significance:
=============
This change addresses a corner case arithmetic operations involving addition.

Bug: ossFuzz: 477312356
Test: poc in bug
---
 decoder/ixheaacd_mps_hybrid_filt.c | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/decoder/ixheaacd_mps_hybrid_filt.c b/decoder/ixheaacd_mps_hybrid_filt.c
index 60c1b7a4..c166a0a3 100644
--- a/decoder/ixheaacd_mps_hybrid_filt.c
+++ b/decoder/ixheaacd_mps_hybrid_filt.c
@@ -1164,13 +1164,13 @@ VOID ixheaacd_apply_ana_hyb_filt_bank_create_x_res(
     *p_hybrid_im++ = m_temp_output_imag[1];
 
     if (*counter > 4) {
-      *p_hybrid_re++ = (m_temp_output_real[2] + m_temp_output_real[5]);
-      *p_hybrid_im++ = (m_temp_output_imag[2] + m_temp_output_imag[5]);
+      *p_hybrid_re++ = ixheaac_add32_sat(m_temp_output_real[2], m_temp_output_real[5]);
+      *p_hybrid_im++ = ixheaac_add32_sat(m_temp_output_imag[2], m_temp_output_imag[5]);
     }
 
     if (*counter > 5) {
-      *p_hybrid_re++ = (m_temp_output_real[3] + m_temp_output_real[4]);
-      *p_hybrid_im++ = (m_temp_output_imag[3] + m_temp_output_imag[4]);
+      *p_hybrid_re++ = ixheaac_add32_sat(m_temp_output_real[3], m_temp_output_real[4]);
+      *p_hybrid_im++ = ixheaac_add32_sat(m_temp_output_imag[3], m_temp_output_imag[4]);
     }
 
     ch_off_set = 6;