Fix heap buffer overflow while searching for valid PPS am: 5204651228

am: 89e719dc77

Change-Id: I7b8ba83bc105fd6a654ff95f1148aeeba0d70a97
This commit is contained in:
Harish Mahendrakar 2017-05-17 10:07:11 +00:00 committed by android-build-merger
commit 22af42db03

View file

@ -257,10 +257,11 @@ IHEVCD_ERROR_T ihevcd_parse_slice_header(codec_t *ps_codec,
{
pps_t *ps_pps_ref = ps_codec->ps_pps_base;
while(0 == ps_pps_ref->i1_pps_valid)
{
ps_pps_ref++;
if((ps_pps_ref - ps_codec->ps_pps_base >= MAX_PPS_CNT - 1))
return IHEVCD_INVALID_HEADER;
if((ps_pps_ref - ps_codec->ps_pps_base >= MAX_PPS_CNT - 1))
return IHEVCD_INVALID_HEADER;
}
ihevcd_copy_pps(ps_codec, pps_id, ps_pps_ref->i1_pps_id);
}