diff options
| author | Neelkamal Semwal <neelkamal.semwal@ittiam.com> | 2022-05-26 18:00:34 +0000 |
|---|---|---|
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | 2022-05-26 18:00:34 +0000 |
| commit | f23c4227611c8da2fece1362feb61bf055bab630 (patch) | |
| tree | b59bc99d66ae5cc90cf2ea1b9af0c9bec6032a0e | |
| parent | 9545f191640c5e4c5d81f5bfd0cae30b3eb058e6 (diff) | |
| parent | 1c2342b48e1fb428a6a3de30a9537dddb003a939 (diff) | |
| download | libhevc-temp_sam_236045730.tar.gz | |
decoder: Fix integer overflow in ihevcd_parse_pred_wt_ofst am: 1c2342b48etemp_sam_236045730
Original change: https://android-review.googlesource.com/c/platform/external/libhevc/+/2100214
Change-Id: I41da72ec09bc57d94052c2245888d04918ad0444
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
| -rw-r--r-- | decoder/ihevcd_parse_headers.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/decoder/ihevcd_parse_headers.c b/decoder/ihevcd_parse_headers.c index e16a9e6..f70e150 100644 --- a/decoder/ihevcd_parse_headers.c +++ b/decoder/ihevcd_parse_headers.c @@ -168,6 +168,11 @@ WORD32 ihevcd_parse_pred_wt_ofst(bitstrm_t *ps_bitstrm, if(ps_sps->i1_chroma_format_idc != 0) { SEV_PARSE("delta_chroma_log2_weight_denom", value, ps_bitstrm); + if((value < -7) || (value > 7)) + { + return IHEVCD_INVALID_PARAMETER; + } + if(((ps_wt_ofst->i1_luma_log2_weight_denom + value) < 0) || ((ps_wt_ofst->i1_luma_log2_weight_denom + value) > 7)) { |