virtualenv/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-08-10 06:10:52 +02:00
Code Issues Releases Activity

avcodec/evc_ps: Fix size of tile_(row|column) arrays

Browse Source 
Prevents out-of-bound writes when parsing tile row heights.
Fixes Coverity issue #1538300.

Reviewed-by: James Almer <jamrial@gmail.com>
Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@outlook.com>
This commit is contained in:
Andreas Rheinhardt
2023-07-16 16:01:58 +02:00
parent 36f4e6f8f4
commit b6305a7873
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
libavcodec/evc_ps.h
View File

@@ -192,8 +192,8 @@ typedef struct EVCParserPPS {
uint32_t num_tile_columns_minus1; // ue(v) uint32_t num_tile_columns_minus1; // ue(v)
uint32_t num_tile_rows_minus1; // ue(v) uint32_t num_tile_rows_minus1; // ue(v)
uint8_t uniform_tile_spacing_flag; // u(1) uint8_t uniform_tile_spacing_flag; // u(1)
uint32_t tile_column_width_minus1[EVC_MAX_TILE_ROWS]; // ue(v) uint32_t tile_column_width_minus1[EVC_MAX_TILE_COLUMNS]; // ue(v)
uint32_t tile_row_height_minus1[EVC_MAX_TILE_COLUMNS]; // ue(v) uint32_t tile_row_height_minus1[EVC_MAX_TILE_ROWS]; // ue(v)
uint8_t loop_filter_across_tiles_enabled_flag; // u(1) uint8_t loop_filter_across_tiles_enabled_flag; // u(1)
uint32_t tile_offset_len_minus1; // ue(v) uint32_t tile_offset_len_minus1; // ue(v)
uint8_t tile_id_len_minus1; // ue(v) uint8_t tile_id_len_minus1; // ue(v)