h264: reset ref count if decoding the slice header fails
authorAnton Khirnov <anton@khirnov.net>
Thu, 28 Nov 2013 09:54:35 +0000 (10:54 +0100)
committerAnton Khirnov <anton@khirnov.net>
Sat, 18 Jan 2014 19:51:04 +0000 (20:51 +0100)
commit0652e024c680420d298cdf3719d0a0c030173fe3
tree8b50932a15b0ff745ee271d38acd7da504f7c759
parent98cc9efc5f6b4dc847ed3b9b60b1c3bcd14e6791
h264: reset ref count if decoding the slice header fails

Otherwise the ER code might try to use some already freed references.

Fixes possible access to freed memory.

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC:libav-stable@libav.org
libavcodec/h264.c