shithub: libvpx

Info  •  Files  •  Log  •  Branches

Changed to prevent decoder crash

The change prevent a decoder crash for invalid stream with negative
size.

Change-Id: I7411765f3524c783058fa3d436549be4e75d8969

--- a/vp9/decoder/vp9_decodeframe.c

+++ b/vp9/decoder/vp9_decodeframe.c

@@ -743,7 +743,7 @@

   if (!found)

     read_frame_size(rb, &width, &height);

-  if (!width || !height)

+  if (width <= 0 || height <= 0)

     vpx_internal_error(&cm->error, VPX_CODEC_CORRUPT_FRAME,

                        "Referenced frame with invalid size");

-- 

⑨