aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Niedermayer <michaelni@gmx.at>2015-05-13 13:35:57 +0200
committerMichael Niedermayer <michaelni@gmx.at>2015-05-13 14:26:17 +0200
commitb195aa5d529040f43ab3acf0079cecbeb111bd57 (patch)
tree9ae8980edc57258b0d11c63df190ce8e6751da40
parent16c95b107365cdbfcde1945370b59fc7e17e0309 (diff)
downloadffmpeg-b195aa5d529040f43ab3acf0079cecbeb111bd57.tar.gz
avcodec/hevc_ps: Check vps_num_hrd_parameters
Fix CID1239052 part2 Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-rw-r--r--libavcodec/hevc_ps.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/libavcodec/hevc_ps.c b/libavcodec/hevc_ps.c
index b684e491f5..196ce3681d 100644
--- a/libavcodec/hevc_ps.c
+++ b/libavcodec/hevc_ps.c
@@ -480,6 +480,11 @@ int ff_hevc_decode_nal_vps(HEVCContext *s)
if (vps->vps_poc_proportional_to_timing_flag)
vps->vps_num_ticks_poc_diff_one = get_ue_golomb_long(gb) + 1;
vps->vps_num_hrd_parameters = get_ue_golomb_long(gb);
+ if (vps->vps_num_hrd_parameters > (unsigned)vps->vps_num_layer_sets) {
+ av_log(s->avctx, AV_LOG_ERROR,
+ "vps_num_hrd_parameters %d is invalid\n", vps->vps_num_hrd_parameters);
+ goto err;
+ }
for (i = 0; i < vps->vps_num_hrd_parameters; i++) {
int common_inf_present = 1;