h264: do not let invalid values in h->ref_count on ff_h264_decode_ref_pic_list_reordering() errors.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
		
				
					committed by
					
						
						Michael Niedermayer
					
				
			
			
				
	
			
			
			
						parent
						
							db5b487551
						
					
				
				
					commit
					2428b53f6d
				
			@@ -2909,8 +2909,10 @@ static int decode_slice_header(H264Context *h, H264Context *h0){
 | 
				
			|||||||
        ff_h264_fill_default_ref_list(h);
 | 
					        ff_h264_fill_default_ref_list(h);
 | 
				
			||||||
    }
 | 
					    }
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    if(h->slice_type_nos!=AV_PICTURE_TYPE_I && ff_h264_decode_ref_pic_list_reordering(h) < 0)
 | 
					    if(h->slice_type_nos!=AV_PICTURE_TYPE_I && ff_h264_decode_ref_pic_list_reordering(h) < 0) {
 | 
				
			||||||
 | 
					        h->ref_count[1]= h->ref_count[0]= 0;
 | 
				
			||||||
        return -1;
 | 
					        return -1;
 | 
				
			||||||
 | 
					    }
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    if(h->slice_type_nos!=AV_PICTURE_TYPE_I){
 | 
					    if(h->slice_type_nos!=AV_PICTURE_TYPE_I){
 | 
				
			||||||
        s->last_picture_ptr= &h->ref_list[0][0];
 | 
					        s->last_picture_ptr= &h->ref_list[0][0];
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user