commit | 071357d86191d052f3e4d1a312d019b9a76ffb35 | [log] [tgz] |
---|---|---|
author | James Zern <jzern@google.com> | Wed Jun 07 20:46:13 2017 -0700 |
committer | Chong Zhang <chz@google.com> | Wed Jan 08 15:24:39 2020 -0800 |
tree | f8a0671b181ab6cbe2d7df01bccc5f3469e7e8a6 | |
parent | 6cdf87a296d94c4f4314027aacd968fe55832c5e [diff] |
vp8_decode_frame: fix oob read on truncated key frame -- DO NOT MERGE the check for error correction being disabled was overriding the data length checks. this avoids returning incorrect information (width / height) for the decoded frame which could result in inconsistent sizes returned in to an application causing it to read beyond the bounds of the frame allocation. BUG=webm:1443 BUG=b/62458770 bug: 62458770 Change-Id: I063459674e01b57c0990cb29372e0eb9a1fbf342