Commit 97af71fc for libheif
commit 97af71fc03a6b6592870ed6794ba066f68e5788d
Author: Dirk Farin <dirk.farin@gmail.com>
Date: Mon May 18 21:41:35 2026 +0200
vvdec: split frame size adjustment to prevent overflow
diff --git a/libheif/plugins/decoder_vvdec.cc b/libheif/plugins/decoder_vvdec.cc
index 0c317ee2..60badb6f 100644
--- a/libheif/plugins/decoder_vvdec.cc
+++ b/libheif/plugins/decoder_vvdec.cc
@@ -200,6 +200,7 @@ heif_error vvdec_push_data2(void* decoder_raw, const void* frame_data, size_t fr
}
data += 4;
+ frame_size -= 4;
std::vector<uint8_t> nalu;
nalu.push_back(0);
@@ -209,7 +210,7 @@ heif_error vvdec_push_data2(void* decoder_raw, const void* frame_data, size_t fr
decoder->nalus.push_back({std::move(nalu), user_data});
data += size;
- frame_size -= 4 + size;
+ frame_size -= size;
}
return heif_error_ok;