diff options
author | Android Build Merger (Role) <noreply-android-build-merger@google.com> | 2018-04-20 21:13:36 +0000 |
---|---|---|
committer | Android Build Merger (Role) <noreply-android-build-merger@google.com> | 2018-04-20 21:13:36 +0000 |
commit | 0e0458c8daa2f52b41e39ce5d6bdaf5e9f666d7c (patch) | |
tree | 6c782253adcd8979a2a98a91401df79ab7558401 | |
parent | 752f38b19f0768a36261bf459b720654cb1ecdf1 (diff) | |
parent | 092cd28d041ee933f58dbe28b8192dc773cc23a6 (diff) | |
download | libhevc-0e0458c8daa2f52b41e39ce5d6bdaf5e9f666d7c.tar.gz |
[automerger] Return error for invalid st/lt sps parameters am: b93923e288 am: 797c104f3b am: 092cd28d04
Change-Id: Idef27e7a7aac1efd071414aedb94918365615d3c
-rw-r--r-- | common/ihevc_defs.h | 2 | ||||
-rw-r--r-- | decoder/ihevcd_parse_headers.c | 10 |
2 files changed, 9 insertions, 3 deletions
diff --git a/common/ihevc_defs.h b/common/ihevc_defs.h index 946687f..5360ff2 100644 --- a/common/ihevc_defs.h +++ b/common/ihevc_defs.h @@ -274,7 +274,7 @@ typedef enum { #define SPS_MAX_SUB_LAYERS 7 /* Maximum long term reference pics */ -#define MAX_LTREF_PICS_SPS 16 +#define MAX_LTREF_PICS_SPS 32 #define MAX_STREF_PICS_SPS 64 diff --git a/decoder/ihevcd_parse_headers.c b/decoder/ihevcd_parse_headers.c index ce0e3f8..22836a0 100644 --- a/decoder/ihevcd_parse_headers.c +++ b/decoder/ihevcd_parse_headers.c @@ -1478,10 +1478,12 @@ IHEVCD_ERROR_T ihevcd_parse_sps(codec_t *ps_codec) } UEV_PARSE("num_short_term_ref_pic_sets", value, ps_bitstrm); + if(value < 0 || value > MAX_STREF_PICS_SPS) + { + return IHEVCD_INVALID_PARAMETER; + } ps_sps->i1_num_short_term_ref_pic_sets = value; - ps_sps->i1_num_short_term_ref_pic_sets = CLIP3(ps_sps->i1_num_short_term_ref_pic_sets, 0, MAX_STREF_PICS_SPS); - for(i = 0; i < ps_sps->i1_num_short_term_ref_pic_sets; i++) ihevcd_short_term_ref_pic_set(ps_bitstrm, &ps_sps->as_stref_picset[0], ps_sps->i1_num_short_term_ref_pic_sets, i, &ps_sps->as_stref_picset[i]); @@ -1491,6 +1493,10 @@ IHEVCD_ERROR_T ihevcd_parse_sps(codec_t *ps_codec) if(ps_sps->i1_long_term_ref_pics_present_flag) { UEV_PARSE("num_long_term_ref_pics_sps", value, ps_bitstrm); + if(value < 0 || value > MAX_LTREF_PICS_SPS) + { + return IHEVCD_INVALID_PARAMETER; + } ps_sps->i1_num_long_term_ref_pics_sps = value; for(i = 0; i < ps_sps->i1_num_long_term_ref_pics_sps; i++) |