[automerger] m4v_h263: add a test for invalid/negative value am: 7802c68aeb am: 08aa2367b5 am: 644ad716f0

Change-Id: I17c7f0ac31f92f8957461794e0b01d187219843d
5 years ago · c9528234a1
parent 3faebc5eb3 644ad716f0
commit c9528234a1
1 changed files with 5 additions and 1 deletions
--- a/media/libstagefright/codecs/m4v_h263/dec/src/packet_util.cpp
+++ b/media/libstagefright/codecs/m4v_h263/dec/src/packet_util.cpp
@ -52,7 +52,11 @@ PV_STATUS PV_ReadVideoPacketHeader(VideoDecData *video, int *next_MB)
        PV_BitstreamByteAlign(stream);
        BitstreamReadBits32(stream, resync_marker_length);

-        *next_MB = (int) BitstreamReadBits16(stream, nbits);
+        int mbnum = (int) BitstreamReadBits16(stream, nbits);
+        if (mbnum < 0) {
+            return PV_FAIL;
+        }
+        *next_MB = mbnum;
 //      if (*next_MB <= video->mbnum)   /*  needs more investigation */
 //          *next_MB = video->mbnum+1;