Chris c8474c515c Avoid signed overflow in bs_read_se() (#2071) ...

bs_read_ue() can return values above INT32_MAX. bs_read_se() stored the
result in an int32_t and computed (r+1)/2, which is undefined behavior
when the code is 0x7FFFFFFF and gives wrong values for codes above
INT32_MAX. The SPS being parsed comes from the host during the H.264
SPS fixup.

Do the conversion in unsigned arithmetic. bs_read_ue() returns at most
0xFFFFFFFE, so both branches produce in-range int32_t values, and every
code that was previously well-defined decodes to the same value.

2026-10-24 18:17:00 -05:00

..

bs.h

Avoid signed overflow in bs_read_se() (#2071)

2026-10-24 18:17:00 -05:00

h264_nal.c

Re-add the h264bitstream file headers mistakenly removed during vendoring

2026-10-07 20:19:06 -05:00

h264_stream.c

Clamp additional values that can be used as array indices

2026-10-14 01:09:54 -05:00

h264_stream.h

Re-add the h264bitstream file headers mistakenly removed during vendoring

2026-10-07 20:19:06 -05:00

h264bitstream.pro

Remove warn_off for h264bitstream

2026-10-12 02:31:48 -05:00

LICENSE

Import minimal set of code from h264bitstream needed for SPS fixups

2026-07-26 19:23:34 -05:00