• Jeffrey Kardatzke's avatar
    Fix dependent slice handling in H265 parser/decoder · f39d45ee
    Jeffrey Kardatzke authored
    This was not being handled correctly before. We now require passing back
    in the prior decoded slice data so that dependent slice header parsing
    will be correct. Previously we relied on the decoder to do this, but
    even then we didn't handle all the fields properly. Fixes new fuzzer
    case and removes need for prior fuzzer fix in this area.
    
    This also fixes a range check issue where values needed to be in the 0
    to 2^15 - 1 range for a few things that fixes another fuzzer case.
    
    BUG=b:153111783,chrome:1149206,chrome:1148863,chrome:1149205
    TEST=H265 playback still works, unit/fuzzer tests pass
    
    Change-Id: I722dd5d2996685fd716f2218b3d9031a51fc4c79
    Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2542946
    Commit-Queue: Jeffrey Kardatzke <jkardatzke@google.com>
    Reviewed-by: default avatarSergey Volk <servolk@chromium.org>
    Reviewed-by: default avatarDale Curtis <dalecurtis@chromium.org>
    Cr-Commit-Position: refs/heads/master@{#828369}
    f39d45ee
h265_decoder.cc 29.5 KB