From 4040554b374f3605e65fcd00b6128885700f8cd5 Mon Sep 17 00:00:00 2001
From: Naveen Kumar P <naveenkumar.p@ittiam.com>
Date: Wed, 5 Apr 2017 10:31:08 +0530
Subject: DO NOT MERGE Check for cpb cnt in hrd parsing

Bug: 34896431

The arrays in hrd are of size MAX_CPB_CNT. If cpb cnt is more
than MAX_CPB_CNT, more data is parsed and the subsequent buffer
is corrupted.

Change-Id: I74c01b8c7142b67a358eb5e36b160a7fbf2b69e4
---
 common/ihevc_defs.h | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'common')

diff --git a/common/ihevc_defs.h b/common/ihevc_defs.h
index 7f58121..c18ff03 100644
--- a/common/ihevc_defs.h
+++ b/common/ihevc_defs.h
@@ -454,6 +454,6 @@ enum
  */
 #define INTRA_PRED_CHROMA_IDX_NONE  7
 
-
+#define MAX_CPB_CNT 32
 
 #endif /*__IHEVC_DEFS_H_*/
-- 
cgit v1.2.3