Return error if SPS parsing reads more bytes than the nal length am: 232bbe1908 am: 2f206ceb72 am: c7ddfff98c am: cac2f841ae am: c30ceb1eea

am: 81d057f43b

Change-Id: Iadb1c837aa3412e8eee6efa841c77fe1273b3d5f
This commit is contained in:
Harish Mahendrakar 2017-03-11 00:30:32 +00:00 • committed by android-build-merger
commit ad7cfee8f0

View file

@ -1460,6 +1460,10 @@ IHEVCD_ERROR_T ihevcd_parse_sps(codec_t *ps_codec)
BITS_PARSE("sps_extension_flag", value, ps_bitstrm, 1);
if((UWORD8 *)ps_bitstrm->pu4_buf > ps_bitstrm->pu1_buf_max)
{
return IHEVCD_INVALID_PARAMETER;
}
{
WORD32 numerator;