aboutsummaryrefslogtreecommitdiffstats
path: root/libavcodec/x86/hevc_deblock.asm
diff options
context:
space:
mode:
authorAndreas Rheinhardt <andreas.rheinhardt@outlook.com>2022-06-22 09:19:01 +0200
committerAndreas Rheinhardt <andreas.rheinhardt@outlook.com>2022-06-24 18:31:03 +0200
commita217c1472d3bb2dc949ac45f241336ae65c3a7b7 (patch)
tree85e03444988da26e79aa485bb609edf7f001da8d /libavcodec/x86/hevc_deblock.asm
parent48a0cd06e38f100115357ca34716e227f3ad5e03 (diff)
downloadffmpeg-a217c1472d3bb2dc949ac45f241336ae65c3a7b7.tar.gz
avcodec/h2645_parse: Only trim RBSP trailing padding if it exists
It does not exist for NALUs for which the SODB is empty; it also does not exist for NALUs for which not even the complete header is present. The former category contains end of sequence and end of bitstream units. The latter category consists of one-byte HEVC units (the ordinary H.264 header is only one byte long). This commit therefore stops stripping RBSP trailing padding from the former type of unit and discards the latter type of unit altogether. This also fixes an assertion failure: Before this commit, a one-byte HEVC NALU from an ISOBMFF packet could pass all the checks in hevc_parse_nal_header() (because the first byte of the size field of the next unit is mistaken as containing the temporal_id); yet because the trailing padding bits were stripped, its actually had a size of less than eight bits; because h2645_parse.c uses the checked bitstream reader, the get_bits_count() of the GetBitContext is not 16 in this case; it is not even a multiple of eight and this can trigger an assert in ff_hevc_decode_nal_sei(). Fixes: Assertion failure Fixes: 46662/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-4947860854013952 Reviewed-by: Michael Niedermayer <michael@niedermayer.cc> Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@outlook.com>
Diffstat (limited to 'libavcodec/x86/hevc_deblock.asm')
0 files changed, 0 insertions, 0 deletions