diff options
| author | James Zern <jzern@google.com> | 2017-06-07 20:46:13 -0700 |
|---|---|---|
| committer | James Zern <jzern@google.com> | 2017-06-08 23:16:04 +0000 |
| commit | 45daecb4f73a47ab3236a29a3a48c52324cbf19a (patch) | |
| tree | 7140fa811c11246ff7790823f4732c8b0ea3a278 /test/test-data.mk | |
| parent | 9cea3a3c4efc25e03781c60d34f867ff4f35e73e (diff) | |
| download | libvpx-45daecb4f73a47ab3236a29a3a48c52324cbf19a.tar libvpx-45daecb4f73a47ab3236a29a3a48c52324cbf19a.tar.gz libvpx-45daecb4f73a47ab3236a29a3a48c52324cbf19a.tar.bz2 libvpx-45daecb4f73a47ab3236a29a3a48c52324cbf19a.zip | |
vp8_decode_frame: fix oob read on truncated key frame
the check for error correction being disabled was overriding the data
length checks. this avoids returning incorrect information (width /
height) for the decoded frame which could result in inconsistent sizes
returned in to an application causing it to read beyond the bounds of
the frame allocation.
BUG=webm:1443
BUG=b/62458770
Change-Id: I063459674e01b57c0990cb29372e0eb9a1fbf342
Diffstat (limited to 'test/test-data.mk')
| -rw-r--r-- | test/test-data.mk | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/test/test-data.mk b/test/test-data.mk index b39ab8763..1656372b3 100644 --- a/test/test-data.mk +++ b/test/test-data.mk @@ -732,6 +732,8 @@ LIBVPX_TEST_DATA-$(CONFIG_VP9_DECODER) += vp93-2-20-12bit-yuv444.webm.md5 endif # CONFIG_VP9_HIGHBITDEPTH # Invalid files for testing libvpx error checking. +LIBVPX_TEST_DATA-$(CONFIG_VP8_DECODER) += invalid-bug-1443.ivf +LIBVPX_TEST_DATA-$(CONFIG_VP8_DECODER) += invalid-bug-1443.ivf.res LIBVPX_TEST_DATA-$(CONFIG_VP8_DECODER) += invalid-vp80-00-comprehensive-018.ivf.2kf_0x6.ivf LIBVPX_TEST_DATA-$(CONFIG_VP8_DECODER) += invalid-vp80-00-comprehensive-018.ivf.2kf_0x6.ivf.res LIBVPX_TEST_DATA-$(CONFIG_VP9_DECODER) += invalid-vp90-01-v3.webm |