[PATCH] fixed #2355

Gbp-Pq: Name CVE-2022-47657.patch

diff --git a/src/media_tools/av_parsers.c b/src/media_tools/av_parsers.c
index 6dc277a4d3c7c8ec1f4d1e5af24f57c63e65bf46..50efd9e18313feece288cc8448f9794988cee6fa 100644 (file)
--- a/src/media_tools/av_parsers.c
+++ b/src/media_tools/av_parsers.c
@@ -7086,6 +7086,11 @@ static Bool hevc_parse_vps_extension(HEVC_VPS *vps, GF_BitStream *bs)
                else {
                        vps->layer_id_in_nuh[i] = i;
                }
+               if (vps->layer_id_in_nuh[i] > MAX_LHVC_LAYERS) {
+                       GF_LOG(GF_LOG_ERROR, GF_LOG_CODING, ("[HEVC] %d layers in VPS ext but only %d supported in GPAC\n", vps->layer_id_in_nuh[i], MAX_LHVC_LAYERS));
+                       vps->layer_id_in_nuh[i] = 0;
+                       return -1;
+               }
                vps->layer_id_in_vps[vps->layer_id_in_nuh[i]] = i;
 
                if (!splitting_flag) {