tree 7923b8a6c1f0de96377c96f692812d100d6939f2
parent 5e7242dfda069046dced13cac8170bfe0fdb5f05
author James Zern <jzern@google.com> 1403394929 -0700
committer James Zern <jzern@google.com> 1403663171 -0700

vp9: check tile column count

the max is 6. there are assumptions throughout the decode regarding
this; fixes a crash with a fuzzed bitstream

$ zzuf -s 5861 -r 0.01:0.05 -b 6- \
  < vp90-2-00-quantizer-00.webm.ivf \
  | dd of=invalid-vp90-2-00-quantizer-00.webm.ivf.s5861_r01-05_b6-.ivf \
    bs=1 count=81883

Change-Id: I6af41bb34252e88bc156a4c27c80d505d45f5642