commit 0a79a1b17b62174367e4e36e1c6e27d38da8b3cb
author Yaowu Xu <yaowu@google.com> Fri Feb 17 13:04:54 2017 -0800
committer Yaowu Xu <yaowu@google.com> Fri Feb 17 23:03:03 2017 +0000
tree 190b149b101f0791a76e3046b95c8a95721ab202
parent 4be126289d7e1e0b4f77c75274a522d10a735e2a

Change to use correct size

Replace obselete size "4" with correct one "tile_size_bytes". This
fixes a decoder crash.

BUG=aomedia:352

Change-Id: I5b1c606a4d5be946acc68b3cfe0d0603a5591c44

av1/decoder/decodeframe.c

diff --git a/av1/decoder/decodeframe.c b/av1/decoder/decodeframe.c
index 4b98549..4e944bc 100644
--- a/av1/decoder/decodeframe.c
+++ b/av1/decoder/decodeframe.c
@@ -3280,7 +3280,7 @@
   size_t size;
 
   if (!is_last) {
-    if (!read_is_valid(*data, 4, data_end))
+    if (!read_is_valid(*data, tile_size_bytes, data_end))
       aom_internal_error(error_info, AOM_CODEC_CORRUPT_FRAME,
                          "Truncated packet or corrupt tile length");