virtualenv/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-08-15 14:13:16 +02:00
Code Issues Releases Activity

h264: check ref_count validity for num_ref_idx_active_override_flag

Browse Source 
Fixes segfault in the fuzzed sample bipbop234.ts_s226407.

CC: libav-stable@libav.org
This commit is contained in:
Janne Grunau
2012-11-25 16:02:02 +01:00
parent 150b2361ca
commit 6e5cdf2628
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
libavcodec/h264.c
View File

@@ -2841,8 +2841,13 @@ static int decode_slice_header(H264Context *h, H264Context *h0)
if (num_ref_idx_active_override_flag) { if (num_ref_idx_active_override_flag) {
h->ref_count[0] = get_ue_golomb(&s->gb) + 1; h->ref_count[0] = get_ue_golomb(&s->gb) + 1;
if (h->slice_type_nos == AV_PICTURE_TYPE_B) if (h->ref_count[0] < 1)
return AVERROR_INVALIDDATA;
if (h->slice_type_nos == AV_PICTURE_TYPE_B) {
h->ref_count[1] = get_ue_golomb(&s->gb) + 1; h->ref_count[1] = get_ue_golomb(&s->gb) + 1;
if (h->ref_count[1] < 1)
return AVERROR_INVALIDDATA;
}
} }
if (h->slice_type_nos == AV_PICTURE_TYPE_B) if (h->slice_type_nos == AV_PICTURE_TYPE_B)