shithub: openh264

Download patch

ref: c45e08a984cf79d1d4c72b604b29ab2df84bc0ae
parent: 6ba10ce6f318218b37e42fe66618c30d2f517b65
author: huili2 <huili2@cisco.com>
date: Tue Aug 11 05:45:09 EDT 2015 

prevent error RPLR number overflow case


--- a/codec/decoder/core/src/manage_dec_ref.cpp
+++ b/codec/decoder/core/src/manage_dec_ref.cpp
@@ -197,7 +197,8 @@
   }
 
   if (pRefPicListReorderSyn->bRefPicListReorderingFlag[LIST_0]) {
-    while (pRefPicListReorderSyn->sReorderingSyn[LIST_0][iReorderingIndex].uiReorderingOfPicNumsIdc != 3) {
+    while ((iReorderingIndex < iMaxRefIdx)
+           && (pRefPicListReorderSyn->sReorderingSyn[LIST_0][iReorderingIndex].uiReorderingOfPicNumsIdc != 3)) {
       uint16_t uiReorderingOfPicNumsIdc =
         pRefPicListReorderSyn->sReorderingSyn[LIST_0][iReorderingIndex].uiReorderingOfPicNumsIdc;
       if (uiReorderingOfPicNumsIdc < 2) {