| commit | 09bcc1f710ea65dc158639479288fb1908ff0c53 | [log] [tgz] |
|---|---|---|
| author | Timothy B. Terriberry <tterribe@xiph.org> | Tue Oct 19 15:40:46 2010 -0700 |
| committer | John Koleszar <jkoleszar@google.com> | Fri Oct 22 11:50:56 2010 -0400 |
| tree | f0f4730443a0991b72a8403517cfd7633ac0be55 | |
| parent | a8a38bcf10f2beba39a41ce3c469ff02caebd2ca [diff] |
Improve handling of invalid frames. The code was not checking for frame sizes smaller than 3 bytes, and the partition size checks might have failed if the input buffer was within 16MB of the top of the heap. In addition, the reference count on the current frame buffer was not being decremented on error, so after a small number of errors, no new frame buffer could be found and it would run off the list of them. Change-Id: I0c60dba6adb1e2a29df39754f72a56ab6c776b46