# HG changeset patch # User michael # Date 1171661355 0 # Node ID 8a5a3dd253906920df598252f4a1f2ea9588e11f # Parent e47cc0486771e941f31c507b7d6099c438c05576 fix ref_count check diff -r e47cc0486771 -r 8a5a3dd25390 h264.c --- a/h264.c Fri Feb 16 21:27:59 2007 +0000 +++ b/h264.c Fri Feb 16 21:29:15 2007 +0000 @@ -7922,7 +7922,7 @@ } pps->ref_count[0]= get_ue_golomb(&s->gb) + 1; pps->ref_count[1]= get_ue_golomb(&s->gb) + 1; - if(pps->ref_count[0] > 32 || pps->ref_count[1] > 32){ + if(pps->ref_count[0]-1 > 32-1 || pps->ref_count[1]-1 > 32-1){ av_log(h->s.avctx, AV_LOG_ERROR, "reference overflow (pps)\n"); pps->ref_count[0]= pps->ref_count[1]= 1; return -1;