Eyevinn / mp4ff / 32370406764

82%

push

github

fix: bound num_ref_frames_in_pic_order_cnt_cycle in AVC SPS parsing

An out-of-range num_ref_frames_in_pic_order_cnt_cycle was used directly to
size a slice, so a tiny malformed SPS NAL unit could make ParseSPSNALUnit
allocate multiple gigabytes. Reject values outside the spec range 0-255
(ISO/IEC 14496-10 7.4.2.1.1) before allocating.

5 of 5 new or added lines in 1 file covered. (100.0%)

20699 of 25405 relevant lines covered (81.48%)

0.82 hits per line