mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2024-12-23 12:43:46 +02:00
h264: check that execute_decode_slices() is not called too many times
Fixes invalid reads. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC:libav-stable@libav.org
This commit is contained in:
parent
bfd26b7ce6
commit
9eef9eb301
@ -4495,6 +4495,12 @@ static int execute_decode_slices(H264Context *h, int context_count)
|
||||
H264Context *hx;
|
||||
int i;
|
||||
|
||||
if (h->mb_y >= h->mb_height) {
|
||||
av_log(h->avctx, AV_LOG_ERROR,
|
||||
"Input contains more MB rows than the frame height.\n");
|
||||
return AVERROR_INVALIDDATA;
|
||||
}
|
||||
|
||||
if (h->avctx->hwaccel)
|
||||
return 0;
|
||||
if (context_count == 1) {
|
||||
|
Loading…
Reference in New Issue
Block a user