vp9/update_prob: prevent out of bounds table read
authorJames Zern <jzern@google.com>
Tue, 30 Jun 2015 06:03:14 +0000 (23:03 -0700)
committerMichael Niedermayer <michael@niedermayer.cc>
Tue, 28 Jul 2015 00:42:15 +0000 (02:42 +0200)
commit68650eda95228c9e94a1781166914ee35262d7d7
treecebd67a97ba2cd992192494c6f71b5f915f87227
parentc7cb598bdd8ac914ca300be7031cbe0208eb85e5
vp9/update_prob: prevent out of bounds table read

the max value of the lookup in expanded form is:
(((1 << 7) - 1) << 1) - 65 + 1 + 64 = 254

add one entry of padding to inv_map_table[] to prevent out of bounds
access with non-conforming / fuzzed bitstreams

Signed-off-by: James Zern <jzern@google.com>
Reviewed-by: "Ronald S. Bultje" <rsbultje@gmail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit e91f860ea74e11e9178500fe8794c47f57dbf48c)

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavcodec/vp9.c