diff options
| author | Harish Mahendrakar <harish.mahendrakar@ittiam.com> | 2015-12-18 09:58:28 +0530 |
|---|---|---|
| committer | Sean McCreary <mccreary@mcwest.org> | 2017-03-22 12:25:50 -0600 |
| commit | e8dccb025d946ad4d2665cadde56118075f5eed9 (patch) | |
| tree | 6862f19a18b700a29cc2014273475b434b235ad3 | |
| parent | 4738f6ff605cbd7aeac5c4e152702b6034117b8d (diff) | |
| download | android_external_libavc-e8dccb025d946ad4d2665cadde56118075f5eed9.tar.gz android_external_libavc-e8dccb025d946ad4d2665cadde56118075f5eed9.tar.bz2 android_external_libavc-e8dccb025d946ad4d2665cadde56118075f5eed9.zip | |
Decoder: Padded gau1_ih264d_top_left_mb_part_indx_mod to avoid an out of bound read
CVE-2017-0470
Change-Id: Ie8761de856ed8c7d08f3da61631c1bef446448e6
(cherry picked from commit b88f59d8353d65a75a3d250992f6b7fee1a61757)
(cherry picked from commit 6aac82003d665708b4e21e9b91693b642e2fa64f)
| -rw-r--r-- | decoder/ih264d_tables.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/decoder/ih264d_tables.c b/decoder/ih264d_tables.c index d49de14..dcf773b 100644 --- a/decoder/ih264d_tables.c +++ b/decoder/ih264d_tables.c @@ -855,7 +855,8 @@ const UWORD8 gau1_ih264d_top_left_mb_part_indx_mod[] = { 0, 0 /* Junk */, /* 16x16 */ 0, 8, /* 16x8 */ 0, 2, /* 8x16 */ - 0, 2, 8, 10 /* 8x8 */ + 0, 2, 8, 10, /* 8x8 */ + 0 /* One extra entry is read at the end of loop, but not used */ }; /*! |