Commit d253401a authored by Janne Grunau's avatar Janne Grunau

frame-mt: do not derive_warpmv intrabc blocks

Fixes an use-of-uninitialized-value in decode_b() with
clusterfuzz-testcase-minimized-dav1d_fuzzer_mt-5674585370918912. Credits
to oss-fuzz.
parent 4d3b6c15
Pipeline #2496 passed with stages
in 2 minutes and 59 seconds
......@@ -727,7 +727,9 @@ static int decode_b(Dav1dTileContext *const t,
#undef set_ctx
}
} else {
if (b->comp_type == COMP_INTER_NONE && b->motion_mode == MM_WARP) {
if (f->frame_hdr.frame_type & 1 /* not intrabc */ &&
b->comp_type == COMP_INTER_NONE && b->motion_mode == MM_WARP)
{
uint64_t mask[2] = { 0, 0 };
find_matching_ref(t, intra_edge_flags, bw4, bh4, w4, h4,
have_left, have_top, b->ref[0], mask);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment