[PATCH] fix check for valid PPS idx (#298)
authorDirk Farin <dirk.farin@gmail.com>
Tue, 5 Apr 2022 17:35:46 +0000 (19:35 +0200)
committerPhilipp Kern <pkern@debian.org>
Sun, 16 Oct 2022 13:26:20 +0000 (14:26 +0100)
Gbp-Pq: Name 0006-CVE-2021-35452.patch

libde265/slice.cc

index e85ecc6193c0589906aca3d3e94ba52b84f9fe59..305094a843f780aeff85d46ea9cbf31e7df7076d 100644 (file)
@@ -373,7 +373,7 @@ de265_error slice_segment_header::read(bitreader* br, decoder_context* ctx,
   }
 
   slice_pic_parameter_set_id = get_uvlc(br);
-  if (slice_pic_parameter_set_id > DE265_MAX_PPS_SETS ||
+  if (slice_pic_parameter_set_id >= DE265_MAX_PPS_SETS ||
       slice_pic_parameter_set_id == UVLC_ERROR) {
     ctx->add_warning(DE265_WARNING_NONEXISTING_PPS_REFERENCED, false);
     return DE265_OK;