admin/webrtc_m130
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix undefined-shift in RtpDepacketizerAv1::AssembleFrame

Browse Source 
Bug: chromium:1028348
Change-Id: I824e84138acbf4e73fc21ee8248e29e5cc7a0ba0
Reviewed-on: https://webrtc-review.googlesource.com/c/src/+/160643
Reviewed-by: Sam Zackrisson <saza@webrtc.org>
Commit-Queue: Danil Chapovalov <danilchap@webrtc.org>
Cr-Commit-Position: refs/heads/master@{#29945}
This commit is contained in:
Danil Chapovalov 2019-11-26 10:13:07 +01:00 committed by Commit Bot
parent bfcb6c3f13
commit 5314b13a8d
3 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
modules/rtp_rtcp/source/rtp_depacketizer_av1.cc
View File

@ -311,7 +311,8 @@ bool CalculateObuSizes(ObuInfo* obu_info) {
return false;
}
leb128_byte = *it;
obu_size_bytes |= (leb128_byte & 0x7F) << (size_of_obu_size_bytes * 7);
obu_size_bytes |= uint64_t{leb128_byte & 0x7Fu}
<< (size_of_obu_size_bytes * 7);
++size_of_obu_size_bytes;
++it;
} while ((leb128_byte & 0x80) != 0);

1
test/fuzzers/BUILD.gn
View File

@ -550,6 +550,7 @@ webrtc_fuzzer_test("rtp_depacketizer_av1_assemble_frame_fuzzer") {
sources = [
"rtp_depacketizer_av1_assemble_frame_fuzzer.cc",
]
seed_corpus = "corpora/rtp-depacketizer-av1-assemble-frame-corpus"
deps = [
":fuzz_data_helper",
"../../api:array_view",

1
test/fuzzers/corpora/rtp-depacketizer-av1-assemble-frame-corpus/av1-assemble-frame-0 Normal file
View File

@ -0,0 +1 @@
є0џџџИИИ