mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2024-12-14 03:04:53 +00:00
Actually return with an error condition if we're being asked to deal with too
many reference frames. Also check max num ref frames against our internal ref buffer sizes. Part of fix for roundup issue 281 Originally committed as revision 11215 to svn://svn.ffmpeg.org/ffmpeg/trunk
This commit is contained in:
parent
33e0073129
commit
41f7e2d11d
@ -7210,8 +7210,9 @@ static inline int decode_seq_parameter_set(H264Context *h){
|
||||
}
|
||||
|
||||
tmp= get_ue_golomb(&s->gb);
|
||||
if(tmp > MAX_PICTURE_COUNT-2){
|
||||
if(tmp > MAX_PICTURE_COUNT-2 || tmp >= 32){
|
||||
av_log(h->s.avctx, AV_LOG_ERROR, "too many reference frames\n");
|
||||
return -1;
|
||||
}
|
||||
sps->ref_frame_count= tmp;
|
||||
sps->gaps_in_frame_num_allowed_flag= get_bits1(&s->gb);
|
||||
|
Loading…
Reference in New Issue
Block a user