Fix heap buffer overflow while searching for valid PPS am: 5204651228 am: 89e719dc77 am: 22af42db03 am: 8108fecdf7 am: a136624479 am: a5f39dc005 am: a4d50ccfc5 am: 9c2d2c650b am: a22d701d44

am: 9988d9ce85

Change-Id: Icb35aad058c8f2c69a1a89358f90e8e95f3e55f2
This commit is contained in:
Harish Mahendrakar 2017-05-17 10:28:44 +00:00 committed by android-build-merger
commit aea5479b5e

View file

@ -257,10 +257,11 @@ IHEVCD_ERROR_T ihevcd_parse_slice_header(codec_t *ps_codec,
{
pps_t *ps_pps_ref = ps_codec->ps_pps_base;
while(0 == ps_pps_ref->i1_pps_valid)
{
ps_pps_ref++;
if((ps_pps_ref - ps_codec->ps_pps_base >= MAX_PPS_CNT - 1))
return IHEVCD_INVALID_HEADER;
if((ps_pps_ref - ps_codec->ps_pps_base >= MAX_PPS_CNT - 1))
return IHEVCD_INVALID_HEADER;
}
ihevcd_copy_pps(ps_codec, pps_id, ps_pps_ref->i1_pps_id);
}