CVE-2023-27102

commit 0b1752abff97cb542941d317a0d18aa50cb199b1
Author: Dirk Farin <dirk.farin@gmail.com>
Date:   Sat Mar 4 10:32:43 2023 +0100

    check whether referenced PPS exists (fixes #393)

Gbp-Pq: Name CVE-2023-27102.patch

diff --git a/libde265/decctx.cc b/libde265/decctx.cc
index 8881c0cbb4d51b3d11e4d88665da33bcee4f8bfc..3eb5daa5f9761a35597ade31a58944769295abca 100644 (file)
--- a/libde265/decctx.cc
+++ b/libde265/decctx.cc
@@ -2276,9 +2276,10 @@ bool decoder_context::process_slice_segment_header(slice_segment_header* hdr,
   // get PPS and SPS for this slice
 
   int pps_id = hdr->slice_pic_parameter_set_id;
-  if (pps[pps_id]->pps_read==false) {
+  if (pps[pps_id]==nullptr || pps[pps_id]->pps_read==false) {
     logerror(LogHeaders, "PPS %d has not been read\n", pps_id);
-    assert(false); // TODO
+    img->decctx->add_warning(DE265_WARNING_NONEXISTING_PPS_REFERENCED, false);
+    return false;
   }
 
   current_pps = pps[pps_id];