[Bug 783269] New: overflow will happen when pps->num_tile_columns_minus1 is 19

GStreamer (GNOME Bugzilla) bugzilla at gnome.org
Wed May 31 08:14:33 UTC 2017


https://bugzilla.gnome.org/show_bug.cgi?id=783269

            Bug ID: 783269
           Summary: overflow will happen when pps->num_tile_columns_minus1
                    is 19
    Classification: Platform
           Product: GStreamer
           Version: unspecified
                OS: Windows
            Status: NEW
          Severity: normal
          Priority: Normal
         Component: gst-plugins-bad
          Assignee: gstreamer-bugs at lists.freedesktop.org
          Reporter: juan82.liu at samsung.com
        QA Contact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---

IN gsth265parser.c ,  gst_h265_parse_pps(), 

Line 1868/1869
pps->num_tile_columns_minus1 can be 19,

then go into Line 1874, num_col = 20,

in while loop for (i = 0; i < num_col; i++)
i can be 19,

pps->column_width_minus1[i] will overflow

in header file, its size is 19, column_width_minus1[19];


same issue with pps->num_tile_rows_minus1;

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.


More information about the gstreamer-bugs mailing list