From: Dirk Farin <dirk.farin@gmail.com>
Date: Sat, 4 Nov 2023 14:13:36 +0000 (+0100)
Subject: check validity of conformance window parameters (fixes #427)
X-Git-Tag: archive/raspbian/1.0.11-0+deb11u4+rpi1^2~2
X-Git-Url: https://dgit.raspbian.org/%22http:/www.example.com/%22mailto:kde%40ewsoftware.de/%22style.css//%22node%24level1.%24level2.html/%22/%22http:/www.example.com/%22mailto:kde%40ewsoftware.de/%22style.css/%22node%24level1.%24level2.html/%22?a=commitdiff_plain;h=c24e1900341c2395f13193ab13c81fa1ff8074b1;p=libde265.git

check validity of conformance window parameters (fixes #427)

(cherry picked from commit 221e767136b8c46c748ae35b79ec9b976b3da301)

Gbp-Pq: Name 0013-check-validity-of-conformance-window-parameters-fixe.patch
---

diff --git a/libde265/image.cc b/libde265/image.cc
index 39813b0..057705c 100644
--- a/libde265/image.cc
+++ b/libde265/image.cc
@@ -330,6 +330,14 @@ de265_error de265_image::alloc_image(int w,int h, enum de265_chroma c,
   int top    = sps ? sps->conf_win_top_offset : 0;
   int bottom = sps ? sps->conf_win_bottom_offset : 0;
 
+  if ((left+right)*WinUnitX >= width) {
+    return DE265_ERROR_CODED_PARAMETER_OUT_OF_RANGE;
+  }
+
+  if ((top+bottom)*WinUnitX >= height) {
+    return DE265_ERROR_CODED_PARAMETER_OUT_OF_RANGE;
+  }
+
   width_confwin = width - (left+right)*WinUnitX;
   height_confwin= height- (top+bottom)*WinUnitY;
   chroma_width_confwin = chroma_width -left-right;