diff options
| author | Venkatarama NG. Avadhani <venkatarama.avadhani@ittiam.com> | 2018-03-15 09:17:57 +0530 |
|---|---|---|
| committer | MSe <mse1969@posteo.de> | 2018-06-08 17:30:17 +0200 |
| commit | 314ce8abf82030a0bee04b36b97be795db3ec631 (patch) | |
| tree | 79a5eda28eb725d634b01ced3379e797ab280cb7 | |
| parent | 83fcec4f61fb813e05bfafb6aa56f194c7388f10 (diff) | |
| download | android_external_libmpeg2-314ce8abf82030a0bee04b36b97be795db3ec631.tar.gz android_external_libmpeg2-314ce8abf82030a0bee04b36b97be795db3ec631.tar.bz2 android_external_libmpeg2-314ce8abf82030a0bee04b36b97be795db3ec631.zip | |
Adding Check For Number of Skip MBsreplicant-6.0-0004-rc1
Adding check for the value parsed into number of skip MBs. The skip MBs
function should be called only if the number of skip MBs is more than 0.
Bug: 74016277
Test: POC before/after
Change-Id: Iba1cc7b7e214efaeba510d180495a61105bf2125
(cherry picked from commit 414cd5db73a8cc3cd64bdad954475becffa40478)
CVE-2018-9341
| -rw-r--r-- | decoder/impeg2d_pnb_pic.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/decoder/impeg2d_pnb_pic.c b/decoder/impeg2d_pnb_pic.c index a3ae436..f7937a8 100644 --- a/decoder/impeg2d_pnb_pic.c +++ b/decoder/impeg2d_pnb_pic.c @@ -299,6 +299,11 @@ WORD32 impeg2d_dec_pnb_mb_params(dec_state_t *ps_dec) { u2_mb_addr_incr = impeg2d_get_mb_addr_incr(ps_stream); + if(0 == u2_mb_addr_incr) + { + return IV_FAIL; + } + if(ps_dec->u2_first_mb) { /****************************************************************/ |