diff options
| author | Janne Grunau <janne-vlc@jannau.net> | 2018-10-11 21:31:01 +0300 |
|---|---|---|
| committer | Jean-Baptiste Kempf <jb@videolan.org> | 2018-10-14 00:04:17 +0300 |
| commit | 3e367ef80a356c86c39cbd67285d4ac42fd0a9bb (patch) | |
| tree | 5ad5fb648fbb37204d681efd5401fd264279f1c6 /src/internal.h | |
| parent | 67bab2ba199ad42e6d18aac1198ec059489d3c20 (diff) | |
implement non power of 2 tile rows and columns spec compliant
Makes the tile parsing code simpler. Fixes a heap buffer overflow with
clusterfuzz-testcase-minimized-dav1d_fuzzer-5726018392817664. Credit to
oss-fuzz.
Diffstat (limited to 'src/internal.h')
| -rw-r--r-- | src/internal.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/internal.h b/src/internal.h index de933cd..87bff27 100644 --- a/src/internal.h +++ b/src/internal.h @@ -75,7 +75,7 @@ struct Dav1dContext { int start, end; } tile[256]; int n_tile_data, have_seq_hdr, have_frame_hdr; - unsigned tile_mask; + int n_tiles; Av1SequenceHeader seq_hdr; // FIXME make ref? Av1FrameHeader frame_hdr; // FIXME make ref? |