avcodec/evc_ps: Fix size of tile_(row|column) arrays

Prevents out-of-bound writes when parsing tile row heights. Fixes Coverity issue #1538300. Reviewed-by: James Almer <jamrial@gmail.com> Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@outlook.com>
1 year ago · b6305a7873
parent 36f4e6f8f4
commit b6305a7873
1 changed files with 2 additions and 2 deletions
--- a/libavcodec/evc_ps.h
+++ b/libavcodec/evc_ps.h
@ -192,8 +192,8 @@ typedef struct EVCParserPPS {
    uint32_t num_tile_columns_minus1;                              // ue(v)
    uint32_t num_tile_rows_minus1;                                 // ue(v)
    uint8_t uniform_tile_spacing_flag;                             // u(1)
-    uint32_t tile_column_width_minus1[EVC_MAX_TILE_ROWS];          // ue(v)
-    uint32_t tile_row_height_minus1[EVC_MAX_TILE_COLUMNS];         // ue(v)
+    uint32_t tile_column_width_minus1[EVC_MAX_TILE_COLUMNS];       // ue(v)
+    uint32_t tile_row_height_minus1[EVC_MAX_TILE_ROWS];            // ue(v)
    uint8_t loop_filter_across_tiles_enabled_flag;                 // u(1)
    uint32_t tile_offset_len_minus1;                               // ue(v)
    uint8_t tile_id_len_minus1;                                    // ue(v)