commit 7ba9f34a49f119a4448e874fec45c2bb14f87028
author Harish Mahendrakar <harish.mahendrakar@ittiam.com> Wed Aug 26 16:17:55 2015 +0530
committer Marco Nelissen <marcone@google.com> Fri Oct 16 20:12:42 2015 +0000
tree 517cd50bfcef741f6e2118f8c234135e0f9e07df
parent e023fbb28cc48187d0608c8bca52098bfd9e9fb9

Decoder: Memset 8 extra bytes at the end of internal bitstream buffer

Decoder may read 8 extra bytes at the end of this buffer, though it will never be used
Setting it to zero will ensure unitialized reads are avoided

Change-Id: I724239861cb9fa64f3a70cb5450e094cb3afa20c

decoder/ih264d_api.c

diff --git a/decoder/ih264d_api.c b/decoder/ih264d_api.c
index ddbf769..fc21a06 100644
--- a/decoder/ih264d_api.c
+++ b/decoder/ih264d_api.c
@@ -1955,6 +1955,11 @@
         {
             memcpy(pu1_bitstrm_buf, pu1_buf + u4_length_of_start_code,
                    buflen);
+            /* Decoder may read extra 8 bytes near end of the frame */
+            if((buflen + 8) < buf_size)
+            {
+                memset(pu1_bitstrm_buf + buflen, 0, 8);
+            }
             u4_first_start_code_found = 1;
 
         }