Hi,

On Thu, Dec 15, 2011 at 4:31 PM, Laurent Aimar <[email protected]> wrote:

> On Thu, Dec 15, 2011 at 04:24:05PM -0800, Ronald S. Bultje wrote:
> > On Thu, Dec 15, 2011 at 4:22 PM, Laurent Aimar <[email protected]>
> wrote:
> >
> >     On Thu, Dec 15, 2011 at 12:30:38PM -0800, Ronald S. Bultje wrote:
> >     > +#if !UNCHECKED_BITSTREAM_READER
> >     > +    s->size_in_bits_plus1 = bit_size + 1;
> >     > +#endif
> >      One extra bit will ensure that get_bit_count() will return < 0
> value,
> >     but it does not ensure that get_bits/show_bits like functions or
> macros
> >     return 0 on overread, and so it is incompatible with get_vlc*
> functions
> >     (you will have an infinite loop, at least it was like that when I
> last
> >     check this solution).
> >
> >
> > Why not?
> Please, read the thread
>  "[libav-devel] [PATCH] Checked get_bits.h functions to prevent overread"
> as it contains some explanations and warnings about making a suitable
> safe get_bits implementation (for existing usage of it).
>
> For the get_vlc* case, the functions don't check for overread as it expects
> the buffer to be padded with enough 0 bits (FF_INPUT_BUFFER_PADDING_SIZE
> bytes), and those zeros will ensure that get_vlc() will abort on reading
> an invalid VLC code.


The buffer is padded with 32 bytes of zeroes and index never goes more than
1 bit beyond. You're telling me get_vlc() will read 32 bytes in a single
iteration?

Ronald
_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel

Reply via email to