h264: reset ref count if decoding the slice header fails
authorAnton Khirnov <anton@khirnov.net>
Thu, 28 Nov 2013 09:54:35 +0000 (10:54 +0100)
committerSean McGovern <gseanmcg@gmail.com>
Mon, 14 Apr 2014 20:55:39 +0000 (16:55 -0400)
commit7e8d27c8510a024e6d66d2e1116bb8692d9cb98a
treefcc63e12132784ce8255be96f912b81257d42bc4
parent7fd6c9fb49573870b48a995947edc83eedd7e86e
h264: reset ref count if decoding the slice header fails

Otherwise the ER code might try to use some already freed references.

Fixes possible access to freed memory.

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC:libav-stable@libav.org
libavcodec/h264.c