Commit Graph

1 Commits

Author SHA1 Message Date
Moritz Bunkus
21b5bd3f6b HEVC parser: prevent access to beyond the end of fixed-size arrays
The three arrays delta_poc[], user[] and ref_id[] all have 17
entries. Therefore the loop limits determined by num_pics,
num_positive_pics and num_negative_pics must be checked for validity
before iterating over the arrays.

Fixes the following test cases of #1780:

explorer🆔000110,sig:11,src:000003,op:flip1,pos:0
explorer🆔000699,sig:11,src:002364,op:flip1,pos:138
2016-09-06 23:06:37 +02:00