[PATCH] fix check for valid PPS idx (#298)

Gbp-Pq: Name CVE-2021-35452.patch

diff --git a/libde265/slice.cc b/libde265/slice.cc
index fc361bccf3fc0baf5e07c19383f895a9469b34a6..1b01dbd08ef65e9a853323773ffddae451f017e2 100644 (file)
--- a/libde265/slice.cc
+++ b/libde265/slice.cc
@@ -373,7 +373,7 @@ de265_error slice_segment_header::read(bitreader* br, decoder_context* ctx,
   }
 
   slice_pic_parameter_set_id = get_uvlc(br);
-  if (slice_pic_parameter_set_id > DE265_MAX_PPS_SETS ||
+  if (slice_pic_parameter_set_id >= DE265_MAX_PPS_SETS ||
       slice_pic_parameter_set_id == UVLC_ERROR) {
     ctx->add_warning(DE265_WARNING_NONEXISTING_PPS_REFERENCED, false);
     return DE265_OK;