[FFmpeg-devel] [PATCH] Fix decoding crash on some trashed interlaced MPEG2 streams. This fixes issue 2367.

[Måns Rullgård]

Anatoly Nenashev <anatoly.nenashev at ovsoft.ru> writes:

> On 18.02.2011 15:26, M?ns Rullg?rd wrote:
>> What is the actual problem you are trying to detect?  Missing reference
>> picture?
>>
>>    
>
> The problem is available when second field of first decoded interlaced
> picture has P-type. In this case inter prediction can be done from the
> first field of current picture (works fine) or from the second field
> of previous  picture (crashes decoder). Sample exploit attached to
> issue 2367. This sample was specially prepared to show the problem.

Couldn't that be checked per frame instead of per MB?  Sure, doing it
per MB might allow decoding some blocks, but is that really worth it?

-- 
M?ns Rullg?rd
mans at mansr.com