summaryrefslogtreecommitdiff
path: root/gst-libs
diff options
context:
space:
mode:
authorAaron Boxer <aaron.boxer@collabora.com>2021-09-03 14:57:09 -0400
committerGStreamer Marge Bot <gitlab-merge-bot@gstreamer-foundation.org>2021-09-09 15:32:14 +0000
commit15d724e671bb6fb4018059a9ae7948d74fc78cb5 (patch)
tree66dc682840185a6834faf83e2db05b851968f3c7 /gst-libs
parent580ac55194bea03a82625e76a1b5589aecb8f37a (diff)
downloadgstreamer-plugins-bad-15d724e671bb6fb4018059a9ae7948d74fc78cb5.tar.gz
gsth264parser: reject memory management control op greater than 6
This prevents assertion from being thrown in gst_h264_dpb_perform_memory_management_control_operation if corrupt NAL has a control op greater than 6 Part-of: <https://gitlab.freedesktop.org/gstreamer/gst-plugins-bad/-/merge_requests/2508>
Diffstat (limited to 'gst-libs')
-rw-r--r--gst-libs/gst/codecparsers/gsth264parser.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/gst-libs/gst/codecparsers/gsth264parser.c b/gst-libs/gst/codecparsers/gsth264parser.c
index e1703c54e..4aaced912 100644
--- a/gst-libs/gst/codecparsers/gsth264parser.c
+++ b/gst-libs/gst/codecparsers/gsth264parser.c
@@ -723,7 +723,7 @@ gst_h264_slice_parse_dec_ref_pic_marking (GstH264SliceHdr * slice,
dec_ref_pic_m->n_ref_pic_marking = 0;
while (1) {
- READ_UE (nr, mem_mgmt_ctrl_op);
+ READ_UE_MAX (nr, mem_mgmt_ctrl_op, 6);
if (mem_mgmt_ctrl_op == 0)
break;