| commit | b2b07755e02d14a699142a6da691de492ab6872c | [log] [tgz] |
|---|---|---|
| author | James Zern <jzern@google.com> | Sat Jun 21 16:55:29 2014 -0700 |
| committer | James Zern <jzern@google.com> | Tue Jun 24 19:26:11 2014 -0700 |
| tree | 7923b8a6c1f0de96377c96f692812d100d6939f2 | |
| parent | 5e7242dfda069046dced13cac8170bfe0fdb5f05 [diff] |
vp9: check tile column count
the max is 6. there are assumptions throughout the decode regarding
this; fixes a crash with a fuzzed bitstream
$ zzuf -s 5861 -r 0.01:0.05 -b 6- \
< vp90-2-00-quantizer-00.webm.ivf \
| dd of=invalid-vp90-2-00-quantizer-00.webm.ivf.s5861_r01-05_b6-.ivf \
bs=1 count=81883
Change-Id: I6af41bb34252e88bc156a4c27c80d505d45f5642