Changeset def69553 in ffmpeg


Ignore:
Timestamp:
Jan 15, 2015, 8:17:01 AM (10 years ago)
Author:
Martin Storsjö <martin@martin.st>
Branches:
master
Children:
024e5a2d, 330e892c
Parents:
402fb555
git-author:
Michael Niedermayer <michaelni@gmx.at> (01/31/13 03:20:24)
git-committer:
Martin Storsjö <martin@martin.st> (01/15/15 08:17:01)
Message:

h264_cabac: Break infinite loops

This fixes out of array reads and/or infinite loops.

30 is the maximum number of bits that can be read into
coeff_abs below.

CC: libav-stable@libav.org
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Martin Storsjö <martin@martin.st>

File:
1 edited

Legend:

Unmodified
Added
Removed
  • libavcodec/h264_cabac.c

    r402fb555 rdef69553  
    17131713            if( coeff_abs >= 15 ) { \
    17141714                int j = 0; \
    1715                 while( get_cabac_bypass( CC ) ) { \
     1715                while (get_cabac_bypass(CC) && j < 30) { \
    17161716                    j++; \
    17171717                } \
Note: See TracChangeset for help on using the changeset viewer.