mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2024-12-27 01:42:20 +00:00
avcodec/hevc: fix nb_sh / nb_sps check
fixes integer overflow Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
ca671beead
commit
c79acacd2e
@ -243,7 +243,7 @@ static int decode_lt_rps(HEVCContext *s, LongTermRPS *rps, GetBitContext *gb)
|
|||||||
nb_sps = get_ue_golomb_long(gb);
|
nb_sps = get_ue_golomb_long(gb);
|
||||||
nb_sh = get_ue_golomb_long(gb);
|
nb_sh = get_ue_golomb_long(gb);
|
||||||
|
|
||||||
if (nb_sh + nb_sps > FF_ARRAY_ELEMS(rps->poc))
|
if (nb_sh + (uint64_t)nb_sps > FF_ARRAY_ELEMS(rps->poc))
|
||||||
return AVERROR_INVALIDDATA;
|
return AVERROR_INVALIDDATA;
|
||||||
|
|
||||||
rps->nb_refs = nb_sh + nb_sps;
|
rps->nb_refs = nb_sh + nb_sps;
|
||||||
|
Loading…
Reference in New Issue
Block a user