Commit 11353b3f authored by Andrew Wesie's avatar Andrew Wesie Committed by GStreamer Marge Bot
Browse files

codecparsers: h264parser: guard against ref_pic_markings overflow

Part-of: <!1703>
parent 3f8d33ab
Pipeline #214771 waiting for manual action with stages
in 31 seconds
......@@ -723,13 +723,17 @@ gst_h264_slice_parse_dec_ref_pic_marking (GstH264SliceHdr * slice,
dec_ref_pic_m->n_ref_pic_marking = 0;
while (1) {
refpicmarking =
&dec_ref_pic_m->ref_pic_marking[dec_ref_pic_m->n_ref_pic_marking];
READ_UE (nr, mem_mgmt_ctrl_op);
if (mem_mgmt_ctrl_op == 0)
break;
if (dec_ref_pic_m->n_ref_pic_marking >=
G_N_ELEMENTS (dec_ref_pic_m->ref_pic_marking))
goto error;
refpicmarking =
&dec_ref_pic_m->ref_pic_marking[dec_ref_pic_m->n_ref_pic_marking];
refpicmarking->memory_management_control_operation = mem_mgmt_ctrl_op;
if (mem_mgmt_ctrl_op == 1 || mem_mgmt_ctrl_op == 3)
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment