Fix Bugzilla Bug 1521684 OpenH264: heap-buffer-overflow in [@ WelsDec::CWelsDecoder::FlushFrame]

xiaotiansf committed 7 years ago

Commit fd36d2a1 parent 316a3ba1 file · +2 −1Browse files

Showing the changes to codec/decoder/plus/src/welsDecoderExt.cpp (1 of 1 file). Show all

Unified · Split

codec/decoder/plus/src/welsDecoderExt.cpp+2−1

@@ -690,7 +690,8 @@ DECODING_STATE CWelsDecoder::FlushFrame (unsigned char** ppDst, · 689 unmodified lines
690	690	ppDst[1] = m_sPictInfoList[m_iPictInfoIndex].pData[1];
691	691	ppDst[2] = m_sPictInfoList[m_iPictInfoIndex].pData[2];
692	692	m_sPictInfoList[m_iPictInfoIndex].iPOC = sIMinInt32;
693		− m_pDecContext->pPicBuff->ppPic[m_sPictInfoList[m_iPictInfoIndex].iPicBuffIdx]->bAvailableFlag = true;
	693	+ if (m_sPictInfoList[m_iPictInfoIndex].iPicBuffIdx < m_pDecContext->pPicBuff->iCapacity)
	694	+ m_pDecContext->pPicBuff->ppPic[m_sPictInfoList[m_iPictInfoIndex].iPicBuffIdx]->bAvailableFlag = true;
694	695	m_sPictInfoList[m_iPictInfoIndex].bLastGOP = false;
695	696	m_iMinPOC = sIMinInt32;
696	697	--m_iNumOfPicts;