[PATCH] fixed #1899

Gbp-Pq: Name CVE-2021-40570.patch

diff --git a/src/media_tools/av_parsers.c b/src/media_tools/av_parsers.c
index aa9eda1be752b6cfed4c9c7c37e83c44a6ff88fd..85668bb06b8a188e25ec793e1ff6d7222207c4ef 100644 (file)
--- a/src/media_tools/av_parsers.c
+++ b/src/media_tools/av_parsers.c
@@ -5087,6 +5087,7 @@ static s32 gf_media_avc_read_sps_bs_internal(GF_BitStream *bs, AVCState *avc, u3
                sps->offset_for_top_to_bottom_field = gf_bs_get_se(bs);
                sps->poc_cycle_length = gf_bs_get_ue(bs);
                if (sps->poc_cycle_length > GF_ARRAY_LENGTH(sps->offset_for_ref_frame)) {
+                       sps->poc_cycle_length = 255;
                        GF_LOG(GF_LOG_ERROR, GF_LOG_CODING, ("[avc-h264] offset_for_ref_frame overflow from poc_cycle_length\n"));
                        return -1;
                }