wrapper/libhevc-mirror
1
0
Fork 0
mirror of https://github.com/ittiam-systems/libhevc.git synced 2026-10-18 14:56:17 +07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fixed an out of bound read in accessing inverse scan table

Browse source 
Bug: 34819017
Change-Id: Ib25db1da92eee390a3847df06c0c0675ebcfb1a4
This commit is contained in:
Harish Mahendrakar 2015-08-05 11:35:47 +05:30 • committed by Marco Nelissen
parent fd5656fe76
commit fed1a3d8d8
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
decoder/ihevcd_parse_residual.c
View file

@ -191,7 +191,7 @@ WORD32 ihevcd_parse_residual_coding(codec_t *ps_codec,
bitstrm_t *ps_bitstrm = &ps_codec->s_parse.s_bitstrm;
WORD32 last_significant_coeff_x_prefix, last_significant_coeff_y_prefix;
WORD32 last_significant_coeff_x, last_significant_coeff_y;
const UWORD8 *pu1_scan_blk, *pu1_scan_coeff;
const UWORD8 *pu1_scan_blk = NULL, *pu1_scan_coeff;
WORD32 scan_idx;
WORD32 i;
WORD32 sign_data_hiding_flag;
@ -387,7 +387,8 @@ WORD32 ihevcd_parse_residual_coding(codec_t *ps_codec,
last_scan_pos = pu1_scan_coeff[scan_pos];
}
pu1_scan_blk = (UWORD8 *)gapv_ihevc_invscan[scan_idx * 3 + (log2_trafo_size - 2 - 1)];
if(log2_trafo_size > 2)
pu1_scan_blk = (UWORD8 *)gapv_ihevc_invscan[scan_idx * 3 + (log2_trafo_size - 2 - 1)];
pu1_scan_coeff = &gau1_ihevc_invscan4x4[scan_idx][0];
/* Set CSBF array to zero */