diff options
| author | Andreas Rheinhardt <andreas.rheinhardt@outlook.com> | 2023-07-16 16:01:58 +0200 |
|---|---|---|
| committer | Andreas Rheinhardt <andreas.rheinhardt@outlook.com> | 2023-07-16 17:06:50 +0200 |
| commit | b6305a787330af716377f89d1a09afad38c3f05f (patch) | |
| tree | ada1dc03b94e6e9ed8ee27339a874020319d95a4 /libavcodec | |
| parent | 36f4e6f8f4c14b3a571815c55d213d095b54df6f (diff) | |
| download | ffmpeg-b6305a787330af716377f89d1a09afad38c3f05f.tar.gz | |
avcodec/evc_ps: Fix size of tile_(row|column) arrays
Prevents out-of-bound writes when parsing tile row heights.
Fixes Coverity issue #1538300.
Reviewed-by: James Almer <jamrial@gmail.com>
Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@outlook.com>
Diffstat (limited to 'libavcodec')
| -rw-r--r-- | libavcodec/evc_ps.h | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/libavcodec/evc_ps.h b/libavcodec/evc_ps.h index 0bbec1f138..336953b176 100644 --- a/libavcodec/evc_ps.h +++ b/libavcodec/evc_ps.h @@ -192,8 +192,8 @@ typedef struct EVCParserPPS { uint32_t num_tile_columns_minus1; // ue(v) uint32_t num_tile_rows_minus1; // ue(v) uint8_t uniform_tile_spacing_flag; // u(1) - uint32_t tile_column_width_minus1[EVC_MAX_TILE_ROWS]; // ue(v) - uint32_t tile_row_height_minus1[EVC_MAX_TILE_COLUMNS]; // ue(v) + uint32_t tile_column_width_minus1[EVC_MAX_TILE_COLUMNS]; // ue(v) + uint32_t tile_row_height_minus1[EVC_MAX_TILE_ROWS]; // ue(v) uint8_t loop_filter_across_tiles_enabled_flag; // u(1) uint32_t tile_offset_len_minus1; // ue(v) uint8_t tile_id_len_minus1; // ue(v) |