diff options
| author | Harish Mahendrakar <harish.mahendrakar@ittiam.com> | 2019-08-22 16:54:56 -0700 |
|---|---|---|
| committer | Ray Essick <essick@google.com> | 2020-02-04 05:09:05 +0000 |
| commit | 196e72450a1f01797c7f994d00752649407a8baa (patch) | |
| tree | 8729d9bb2973660e5ece9c9c982ba3bbef6f9e73 | |
| parent | 75d1ac1026539f82a299ef6cea2b59150098ddbb (diff) | |
| download | libhevc-196e72450a1f01797c7f994d00752649407a8baa.tar.gz | |
Fix DoS in NAL search
Bug: 139939283
Test: poc in bug
Change-Id: I345232790e2d351d82e9dc6973a5ef86ce513ef3
(cherry picked from commit e52410163e4829a94b7f11ee65fbb5db0d956e21)
| -rw-r--r-- | decoder/ihevcd_decode.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/decoder/ihevcd_decode.c b/decoder/ihevcd_decode.c index 16ed36b..9f634b7 100644 --- a/decoder/ihevcd_decode.c +++ b/decoder/ihevcd_decode.c @@ -626,6 +626,13 @@ WORD32 ihevcd_decode(iv_obj_t *ps_codec_obj, void *pv_api_ip, void *pv_api_op) nal_ofst = ihevcd_nal_search_start_code(ps_codec->pu1_inp_bitsbuf, ps_codec->i4_bytes_remaining); + /* If there is no start code found, consume the data and break */ + if(nal_ofst == ps_codec->i4_bytes_remaining) + { + ps_codec->pu1_inp_bitsbuf += nal_ofst; + ps_codec->i4_bytes_remaining -= nal_ofst; + break; + } ps_codec->i4_nal_ofst = nal_ofst; { |