From c4cd717e90ce00f7c65aa6f07f0215768247f64f Mon Sep 17 00:00:00 2001 From: Francois Cartegnie Date: Sun, 6 Dec 2015 15:02:13 +0100 Subject: [PATCH] packetizer: h264: fix early fail condition sps id can obviously never be negative --- modules/packetizer/h264_nal.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/modules/packetizer/h264_nal.c b/modules/packetizer/h264_nal.c index d5b04ae846..57f69a72f2 100644 --- a/modules/packetizer/h264_nal.c +++ b/modules/packetizer/h264_nal.c @@ -427,6 +427,8 @@ int h264_parse_sps( const uint8_t *p_sps_buf, int i_sps_size, memset( p_sps, 0, sizeof(struct nal_sps) ); CreateRbspFromNAL( &pb_dec, &i_dec, &p_sps_buf[5], i_sps_size - 5 ); + if( !pb_dec ) + return -1; bs_init( &s, pb_dec, i_dec ); int i_profile_idc = bs_read( &s, 8 ); @@ -435,7 +437,7 @@ int h264_parse_sps( const uint8_t *p_sps_buf, int i_sps_size, p_sps->i_level = bs_read( &s, 8 ); /* sps id */ p_sps->i_id = bs_read_ue( &s ); - if( p_sps->i_id >= SPS_MAX || p_sps->i_id < 0 ) + if( p_sps->i_id >= SPS_MAX ) { free( pb_dec ); return -1; -- GitLab