wrapper/libavc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

decoder: Update check for first mb in slice

Browse source 
first_mb_in_slice shouldn't be >= mbs in the picture.

Test: poc in bugs
Bug: b/174238784
Bug: b/174507022
Bug: oss-fuzz:27856
Bug: oss-fuzz:28039
Change-Id: Id3a41c8c2ddf814910fc2d5dd4f57bdd84d28fec
This commit is contained in:
Harish Mahendrakar 2020-12-02 11:54:47 -08:00 • committed by Ray Essick
parent f64194a96f
commit 7e06940dce
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
decoder/ih264d_parse_slice.c
View file

@ -1090,7 +1090,7 @@ WORD32 ih264d_parse_decode_slice(UWORD8 u1_is_idr_slice,
u2_first_mb_in_slice = ih264d_uev(pu4_bitstrm_ofst, u2_first_mb_in_slice = ih264d_uev(pu4_bitstrm_ofst,
pu4_bitstrm_buf); pu4_bitstrm_buf);
if(u2_first_mb_in_slice if(u2_first_mb_in_slice
> (ps_dec->u2_frm_ht_in_mbs * ps_dec->u2_frm_wd_in_mbs)) >= (ps_dec->u2_frm_ht_in_mbs * ps_dec->u2_frm_wd_in_mbs))
{ {
return ERROR_CORRUPTED_SLICE; return ERROR_CORRUPTED_SLICE;