Return error if SPS parsing reads more bytes than the nal length

Bug: 35039946

Change-Id: Ia97fa8711f313d0029d2b13e6d150d5e46b2bb99
(cherry picked from commit a6c58e18a49a1ea4929f8345b3c59f900d5813f5)
This commit is contained in:
Harish Mahendrakar 2017-01-13 17:22:34 +05:30 • committed by Wei Jia
parent 98f9e26d24
commit 232bbe1908

View file

@ -1461,6 +1461,10 @@ IHEVCD_ERROR_T ihevcd_parse_sps(codec_t *ps_codec)
BITS_PARSE("sps_extension_flag", value, ps_bitstrm, 1);
if((UWORD8 *)ps_bitstrm->pu4_buf > ps_bitstrm->pu1_buf_max)
{
return IHEVCD_INVALID_PARAMETER;
}
{
WORD32 numerator;