mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2025-03-24 11:59:38 +00:00
avcodec/h264_cabac: Check decode_cabac_mb_mvd() for failure
Fixes harmless integer overflow Fixes Ticket5150 No speedloss measured, actually its slightly faster, but please benchmark & double check this Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
parent
dcb6d5b831
commit
e5655a32bc
@ -1540,8 +1540,12 @@ static int decode_cabac_mb_mvd(H264SliceContext *sl, int ctxbase, int amvd, int
|
|||||||
int amvd1 = sl->mvd_cache[list][scan8[n] - 1][1] +\
|
int amvd1 = sl->mvd_cache[list][scan8[n] - 1][1] +\
|
||||||
sl->mvd_cache[list][scan8[n] - 8][1];\
|
sl->mvd_cache[list][scan8[n] - 8][1];\
|
||||||
\
|
\
|
||||||
mx += decode_cabac_mb_mvd(sl, 40, amvd0, &mpx);\
|
int mxd = decode_cabac_mb_mvd(sl, 40, amvd0, &mpx);\
|
||||||
my += decode_cabac_mb_mvd(sl, 47, amvd1, &mpy);\
|
int myd = decode_cabac_mb_mvd(sl, 47, amvd1, &mpy);\
|
||||||
|
if (mxd == INT_MIN || myd == INT_MIN) \
|
||||||
|
return AVERROR_INVALIDDATA; \
|
||||||
|
mx += mxd;\
|
||||||
|
my += myd;\
|
||||||
}
|
}
|
||||||
|
|
||||||
static av_always_inline int get_cabac_cbf_ctx(H264SliceContext *sl,
|
static av_always_inline int get_cabac_cbf_ctx(H264SliceContext *sl,
|
||||||
|
Loading…
Reference in New Issue
Block a user