commit 8bb3e8953d3f6a80ef983700bc464d49512e64ab
author Naveen Kumar P <naveenkumar.p@ittiam.com> Fri Mar 31 16:58:15 2017 +0530
committer gitbuildkicker <android-build@google.com> Wed Apr 19 10:59:05 2017 -0700
tree a9e3abeee6d16a2c4dc505ea440b17ff76f978ad
parent 3fbadb5220774c6721a78a2ec49e0f27f32ce7f9

Set current slice ctb x and y to fill prev incomplete slice

If previous slice is not completed, update the current slice
ctb_x and ctb_y so that while filling the previous slice,
the parse slice code can break properly.

Bug: 32322258
Test: boot, ran POC supplied with bug
Change-Id: Ie9090694514a018268851560a3f056194ff6fc91
(cherry picked from commit 830858436bb31036d4260f30c25fa83fd351ed40)

decoder/ihevcd_parse_slice_header.c

diff --git a/decoder/ihevcd_parse_slice_header.c b/decoder/ihevcd_parse_slice_header.c
index b372e5d..62ad6c8 100644
--- a/decoder/ihevcd_parse_slice_header.c
+++ b/decoder/ihevcd_parse_slice_header.c
@@ -729,11 +729,15 @@
             {
                 if(ps_codec->i4_pic_present)
                 {
+                    slice_header_t *ps_slice_hdr_next;
                     ps_codec->i4_slice_error = 1;
                     ps_codec->s_parse.i4_cur_slice_idx--;
                     if(ps_codec->s_parse.i4_cur_slice_idx < 0)
                         ps_codec->s_parse.i4_cur_slice_idx = 0;
 
+                    ps_slice_hdr_next = ps_codec->s_parse.ps_slice_hdr_base + ((ps_codec->s_parse.i4_cur_slice_idx + 1) & (MAX_SLICE_HDR_CNT - 1));
+                    ps_slice_hdr_next->i2_ctb_x = slice_address % ps_sps->i2_pic_wd_in_ctb;
+                    ps_slice_hdr_next->i2_ctb_y = slice_address / ps_sps->i2_pic_wd_in_ctb;
                     return ret;
                 }
                 else