shithub: libvpx

Download patch

ref: ca9ab3fc46b2d3d839ff1e09660e83f146dd9a0b
parent: 51d933769f7b0afca60be79eef15c3edf0901967
author: Jerome Jiang <jianj@google.com>
date: Wed Aug 22 07:01:37 EDT 2018 

Revert "vp8: Fix memory address overflow in decoder."

This reverts commit 45cf384738ad261de7d00769c19b9b2842af06a7.

BUG=875626,875680,webm:1496

Change-Id: I78037b5e57dbf6cfe326b29beaad1128868f09f2


--- a/vp8/decoder/threading.c
+++ b/vp8/decoder/threading.c
@@ -400,24 +400,15 @@
       xd->dst.u_buffer = dst_buffer[1] + recon_uvoffset;
       xd->dst.v_buffer = dst_buffer[2] + recon_uvoffset;
 
-      if (!ref_fb_corrupted[xd->mode_info_context->mbmi.ref_frame]) {
-        xd->pre.y_buffer =
-            ref_buffer[xd->mode_info_context->mbmi.ref_frame][0] +
-            recon_yoffset;
-        xd->pre.u_buffer =
-            ref_buffer[xd->mode_info_context->mbmi.ref_frame][1] +
-            recon_uvoffset;
-        xd->pre.v_buffer =
-            ref_buffer[xd->mode_info_context->mbmi.ref_frame][2] +
-            recon_uvoffset;
-      }
+      xd->pre.y_buffer =
+          ref_buffer[xd->mode_info_context->mbmi.ref_frame][0] + recon_yoffset;
+      xd->pre.u_buffer =
+          ref_buffer[xd->mode_info_context->mbmi.ref_frame][1] + recon_uvoffset;
+      xd->pre.v_buffer =
+          ref_buffer[xd->mode_info_context->mbmi.ref_frame][2] + recon_uvoffset;
 
       /* propagate errors from reference frames */
       xd->corrupted |= ref_fb_corrupted[xd->mode_info_context->mbmi.ref_frame];
-
-      if (xd->corrupted)
-        vpx_internal_error(&pc->error, VPX_CODEC_CORRUPT_FRAME,
-                           "Corrupted reference frame buffer");
 
       mt_decode_macroblock(pbi, xd, 0);