Commit b6305a78 authored by Andreas Rheinhardt's avatar Andreas Rheinhardt

avcodec/evc_ps: Fix size of tile_(row|column) arrays

Prevents out-of-bound writes when parsing tile row heights.
Fixes Coverity issue #1538300.
Reviewed-by: 's avatarJames Almer <jamrial@gmail.com>
Signed-off-by: 's avatarAndreas Rheinhardt <andreas.rheinhardt@outlook.com>
parent 36f4e6f8
......@@ -192,8 +192,8 @@ typedef struct EVCParserPPS {
uint32_t num_tile_columns_minus1; // ue(v)
uint32_t num_tile_rows_minus1; // ue(v)
uint8_t uniform_tile_spacing_flag; // u(1)
uint32_t tile_column_width_minus1[EVC_MAX_TILE_ROWS]; // ue(v)
uint32_t tile_row_height_minus1[EVC_MAX_TILE_COLUMNS]; // ue(v)
uint32_t tile_column_width_minus1[EVC_MAX_TILE_COLUMNS]; // ue(v)
uint32_t tile_row_height_minus1[EVC_MAX_TILE_ROWS]; // ue(v)
uint8_t loop_filter_across_tiles_enabled_flag; // u(1)
uint32_t tile_offset_len_minus1; // ue(v)
uint8_t tile_id_len_minus1; // ue(v)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment