| commit | ef4ce157000b2b5bcbf2bcb36a228ec604803547 | [log] [tgz] |
|---|---|---|
| author | Marco Nelissen <marcone@google.com> | Tue Jul 23 08:27:46 2019 -0700 |
| committer | Marco Nelissen <marcone@google.com> | Wed Jul 24 17:33:10 2019 +0000 |
| tree | d0372c38f6c48e9a530d7dbcc0b504e0d62a2fea | |
| parent | 7802c68aebf7908983508fd4a52a7d53746a80eb [diff] |
Fix OOB access in mpeg4/h263 decoder The decoder does not support an increase in frame width, and would exceed its buffer if the width increased mid-stream. There was an existing check to prevent the total frame size (width*height) from increasing, but in fact the decoder also does not even support a width increase, even if the height decreases correspondingly. Bug: 136175447 Bug: 136173699 Test: manual Change-Id: Ic2d28bb0503635dadeb69ba3be9412d58684e910