Harish Mahendrakar
54ce382232
Merge "Limit boundary PU sizes in case of errors" into lmp-dev am: f661b00835 am: 34ec365ad3
...
am: f7579e8bd4
2017-07-10 19:47:56 +00:00
Harish Mahendrakar
34ec365ad3
Merge "Limit boundary PU sizes in case of errors" into lmp-dev
...
am: f661b00835
2017-07-10 19:38:57 +00:00
TreeHugger Robot
f661b00835
Merge "Limit boundary PU sizes in case of errors" into lmp-dev
2017-07-10 19:29:45 +00:00
Naveen Kumar P
6bf3e38d8c
Merge "Check number of output buffers and sizes" into lmp-dev am: 493410548a am: 41d5957422
...
am: cecb593ca5
2017-06-16 23:35:33 +00:00
Naveen Kumar P
41d5957422
Merge "Check number of output buffers and sizes" into lmp-dev
...
am: 493410548a
2017-06-16 23:32:02 +00:00
TreeHugger Robot
493410548a
Merge "Check number of output buffers and sizes" into lmp-dev
2017-06-16 23:26:32 +00:00
Naveen Kumar P
fc0890497a
Return error for invalid crop parameters am: e8c26c16d7 am: 870c70383d
...
am: 6850014493
2017-06-16 18:41:10 +00:00
Naveen Kumar P
870c70383d
Return error for invalid crop parameters
...
am: e8c26c16d7
2017-06-16 18:28:38 +00:00
Naveen Kumar P
e8c26c16d7
Return error for invalid crop parameters
...
Test: run poc with and without the patch
Bug: 62214264
Change-Id: If627ee9a8f0dbd65963897966e1c2d39f5fbd428
2017-06-15 20:19:16 +00:00
Harish Mahendrakar
62830d130b
Limit boundary PU sizes in case of errors
...
In case of error clips, some PUs are marked as skip.
Ensure such PUs stay within the picture
Bug: 37615911
Test: ran POC included with the bug.
Change-Id: Ie0aeccc752cf556f9dea84de61c15a7906e1060b
2017-06-13 14:54:58 -07:00
Naveen Kumar P
1ffb19f7ae
Check number of output buffers and sizes
...
Bug: 37435531
Bug: 36817631
Bug: 36492741
Change-Id: I85e3da9a8aaefaac0b494868fdc94d858e4cf8e6
2017-06-07 15:28:48 -07:00
Naveen Kumar P
f9a3d7de57
Merge "Fix OOB issue in nal unit parsing" into lmp-dev am: 1ce65aea9f am: c1451ed95b
...
am: 18a325cf80
2017-06-06 20:54:48 +00:00
Naveen Kumar P
c1451ed95b
Merge "Fix OOB issue in nal unit parsing" into lmp-dev
...
am: 1ce65aea9f
2017-06-06 20:50:48 +00:00
TreeHugger Robot
1ce65aea9f
Merge "Fix OOB issue in nal unit parsing" into lmp-dev
2017-06-06 20:42:09 +00:00
Marco Nelissen
e30fa58cf0
Merge "DO NOT MERGE Added check for invalid log2_max_transform_block_size in SPS" into lmp-dev
2017-06-06 20:10:10 +00:00
Naveen Kumar P
ab634125fb
Merge "Set pic_present at end of pic_init instead of beginning" into lmp-dev am: 95cd002d79 am: 18a176494f
...
am: b318a2b6a6
2017-06-06 19:46:07 +00:00
Naveen Kumar P
18a176494f
Merge "Set pic_present at end of pic_init instead of beginning" into lmp-dev
...
am: 95cd002d79
2017-06-06 19:33:37 +00:00
TreeHugger Robot
95cd002d79
Merge "Set pic_present at end of pic_init instead of beginning" into lmp-dev
2017-06-06 19:22:09 +00:00
Harish Mahendrakar
d272cd6369
DO NOT MERGE Added check for invalid log2_max_transform_block_size in SPS
...
Bug: 33918236
Bug: 33964497
Bug: 33965905
Bug: 33862021
Change-Id: If121221d0f6e983c05d95d123af9bed378d1961f
2017-06-05 14:36:00 -07:00
Naveen Kumar P
62ebc32761
Fix OOB issue in nal unit parsing
...
Bug: 37712181
Test: ran patched against POC on nyc-mr2
Change-Id: I5408b3afd898db99265f94573d1163ef83c9b99c
2017-06-02 15:20:48 -07:00
Naveen Kumar P
f103a876f8
Handle error return in parse slice am: 4535874899 am: c83ae25b05
...
am: 2bdd1d0979
2017-06-01 21:10:24 +00:00
Naveen Kumar P
c83ae25b05
Handle error return in parse slice
...
am: 4535874899
2017-06-01 21:04:23 +00:00
Naveen Kumar P
4535874899
Handle error return in parse slice
...
Bug: 37430213
Change-Id: I77f5973db54edccc0972649035b0fbde961c10dd
(cherry picked from commit 16c8c8cceeb74c7f4634803723a0b8b1f4881dc9)
2017-05-30 09:38:36 -07:00
Naveen Kumar P
d012a1ffc0
Set pic_present at end of pic_init instead of beginning
...
Bug: 37469795
In pic_init, pic_present was set in the beggining. If pic_present
was set, process and buffer managment were done. For an error
stream, a crash occured when pic_init returned with error after setting
pic_present.
Change-Id: Iea42e6ad2bc5a74517188fa5e4cc434bb96d46c7
2017-05-23 10:32:34 -07:00
Harish Mahendrakar
8108fecdf7
Fix heap buffer overflow while searching for valid PPS am: 5204651228 am: 89e719dc77
...
am: 22af42db03
2017-05-17 10:10:11 +00:00
Harish Mahendrakar
89e719dc77
Fix heap buffer overflow while searching for valid PPS
...
am: 5204651228
2017-05-17 10:04:11 +00:00
Harish Mahendrakar
5204651228
Fix heap buffer overflow while searching for valid PPS
...
Bug: 37094889
Test: Tested POC on ASAN build
Change-Id: Id4e52cd10a4d5eac015efe4b752162dc39cc30b8
2017-05-16 16:48:29 -07:00
Naveen Kumar P
0b13008b9a
Merge "Check for buffer overflow in pps/slice header parsing" into lmp-dev am: 1853d3871a am: f7635dd278
...
am: 17caa64f8b
2017-05-16 22:29:43 +00:00
Harish Mahendrakar
356364edaa
Merge "memset SPS to zero" into lmp-dev am: 31e21c5134 am: c1c11822d6
...
am: bb4f42afa0
2017-05-16 22:29:22 +00:00
Naveen Kumar P
f7635dd278
Merge "Check for buffer overflow in pps/slice header parsing" into lmp-dev
...
am: 1853d3871a
2017-05-16 22:24:02 +00:00
Harish Mahendrakar
c1c11822d6
Merge "memset SPS to zero" into lmp-dev
...
am: 31e21c5134
2017-05-16 22:23:52 +00:00
TreeHugger Robot
1853d3871a
Merge "Check for buffer overflow in pps/slice header parsing" into lmp-dev
2017-05-16 22:20:33 +00:00
TreeHugger Robot
31e21c5134
Merge "memset SPS to zero" into lmp-dev
2017-05-16 22:18:29 +00:00
Naveen Kumar P
d61d5e5f6a
Check for buffer overflow in pps/slice header parsing
...
Bug: 36215950
Bug: 36215953
Bug: 36216719
Change-Id: Ibdc05e1d5aa21d060d7c683fd9af4bed8537053f
2017-05-15 15:45:50 -07:00
Harish Mahendrakar
2e0e75aede
memset SPS to zero
...
SPS structure is memset to zero in parse_sps()
Bug: 33966031
Bug: 37458993
Change-Id: I7d4c04d2d25d7e9c8f581bd470260fc4394a564b
2017-05-12 16:21:21 -07:00
Marco Nelissen
e4ca1d697d
Merge "Fixed out of bound reads in stack variables" into lmp-dev
...
am: 4629c5cebf
2017-05-12 20:48:11 +00:00
Marco Nelissen
4629c5cebf
Merge "Fixed out of bound reads in stack variables" into lmp-dev
2017-05-12 20:45:19 +00:00
Wonsik Kim
4490398c88
Merge "DO NOT MERGE Check for cpb cnt in hrd parsing" into lmp-dev
2017-05-10 23:48:22 +00:00
Wonsik Kim
8dc7b42e65
Merge "DO NOT MERGE Check for cpb cnt in hrd parsing" into mnc-dev
2017-05-10 23:48:16 +00:00
Harish Mahendrakar
c9834edd64
Fixed out of bound reads in stack variables
...
Out of bound reads in the following variables are fixed
scaling_mat_offset in ihevcd_iquant_itrans_recon_ctb()
ai1_offset_y, ai1_offset_cb and ai1_offset_cr in ihevcd_sao_shift_ctb()
These values were read but not used
Bug: 34819017
Change-Id: Ic00e713b2c61d6793e1e097f852f0d1b3f913712
2017-05-09 14:28:47 -07:00
Hangyu Kuang
576f2fd4ef
Merge "Correct Tiles rows and cols check" into lmp-dev am: 7e3858b313 am: a78650de6d
...
am: 2bd3c9cd07
2017-04-12 20:21:31 +00:00
Hangyu Kuang
a78650de6d
Merge "Correct Tiles rows and cols check" into lmp-dev
...
am: 7e3858b313
2017-04-12 20:10:01 +00:00
Naveen Kumar Ponnusamy
a56dc1d7d0
Merge "Check only allocated mv bufs for releasing from reference" into lmp-dev am: 397d2f6c42 am: 1ebd5e1d81
...
am: 998a1e26c0
2017-04-12 20:10:00 +00:00
Hangyu Kuang
7e3858b313
Merge "Correct Tiles rows and cols check" into lmp-dev
2017-04-12 20:00:25 +00:00
Naveen Kumar Ponnusamy
1ebd5e1d81
Merge "Check only allocated mv bufs for releasing from reference" into lmp-dev
...
am: 397d2f6c42
2017-04-12 19:59:30 +00:00
TreeHugger Robot
397d2f6c42
Merge "Check only allocated mv bufs for releasing from reference" into lmp-dev
2017-04-12 19:49:50 +00:00
Naveen Kumar P
07ef4e7138
Correct Tiles rows and cols check
...
Bug: 36231493
Bug: 34064500
Change-Id: Ib17b2c68360685c5a2c019e1497612a130f9f76a
2017-04-11 14:12:29 -07:00
Ray Essick
60db7fead3
Merge "Set current slice ctb x and y to fill prev incomplete slice" into lmp-dev am: bfcdbd6a5b am: 88133ef0a3
...
am: 6249eafc05
2017-04-10 23:05:10 +00:00
Ray Essick
88133ef0a3
Merge "Set current slice ctb x and y to fill prev incomplete slice" into lmp-dev
...
am: bfcdbd6a5b
2017-04-10 22:55:39 +00:00
Ray Essick
bfcdbd6a5b
Merge "Set current slice ctb x and y to fill prev incomplete slice" into lmp-dev
2017-04-10 22:46:39 +00:00
