lavf/utils.c Protect against accessing entries[nb_entries]
authorMatt Wolenetz <wolenetz@chromium.org>
Mon, 21 Nov 2016 23:54:02 +0000 (15:54 -0800)
committerMichael Niedermayer <michael@niedermayer.cc>
Wed, 25 Jan 2017 23:34:12 +0000 (00:34 +0100)
commit2481f1320a7f3073415897e4ba82c1455f0ec996
treeac1567fb49bccc4557bcd36d45756bd3707c7a99
parentceeeccc86211f072574760cd81b70726d991ad76
lavf/utils.c Protect against accessing entries[nb_entries]

In ff_index_search_timestamp(), if b == num_entries,
m == num_entries - 1, and entries[m].flags & AVINDEX_DISCARD_FRAME is
true, then the search for the next non-discarded packet could access
entries[nb_entries], exceeding its bounds. This change adds a protection
against that scenario. Reference: https://crbug.com/666770

Reviewed-by: Sasi Inguva <isasi@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit fe7547d69e6721d064c8604d0a6375a2d24b35ca)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavformat/utils.c