From 0565c648343cb7d1220da903308ff0aaf89d96b8 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Fri, 16 Feb 2007 21:29:15 +0000 Subject: [PATCH] fix ref_count check Originally committed as revision 7997 to svn://svn.ffmpeg.org/ffmpeg/trunk --- libavcodec/h264.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavcodec/h264.c b/libavcodec/h264.c index 7ec0e6c..41bdc22 100644 --- a/libavcodec/h264.c +++ b/libavcodec/h264.c @@ -7922,7 +7922,7 @@ static inline int decode_picture_parameter_set(H264Context *h, int bit_length){ } pps->ref_count[0]= get_ue_golomb(&s->gb) + 1; pps->ref_count[1]= get_ue_golomb(&s->gb) + 1; - if(pps->ref_count[0] > 32 || pps->ref_count[1] > 32){ + if(pps->ref_count[0]-1 > 32-1 || pps->ref_count[1]-1 > 32-1){ av_log(h->s.avctx, AV_LOG_ERROR, "reference overflow (pps)\n"); pps->ref_count[0]= pps->ref_count[1]= 1; return -1; -- 2.7.4