codecparsers: av1: Clip max tile rows and cols values
authorBenjamin Gaignard <benjamin.gaignard@collabora.com>
Tue, 21 Nov 2023 13:26:54 +0000 (14:26 +0100)
committerGStreamer Marge Bot <gitlab-merge-bot@gstreamer-foundation.org>
Wed, 29 Nov 2023 18:27:44 +0000 (18:27 +0000)
commitcedd5291788ab33f26e36a477cec1e492a9f4240
tree1fbbea2962fcb84399ad73e067e2421cf0dda2ed
parent75ffbf7c304aa0db6891e2be890aa1a89622e179
codecparsers: av1: Clip max tile rows and cols values

Clip tile rows and cols to 64 as describe in AV1 specification
to avoid writing outside array range but preserve sb_cols
and sb_rows value which are used to futher computation.

Fixes ZDI-CAN-22226 / CVE-2023-44429

Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/5734>
subprojects/gst-plugins-bad/gst-libs/gst/codecparsers/gstav1parser.c