rtpdec_vp9: Drop extra sanity check for size of input packet
authorVittorio Giovara <vittorio.giovara@gmail.com>
Mon, 9 Mar 2015 17:27:22 +0000 (17:27 +0000)
committerVittorio Giovara <vittorio.giovara@gmail.com>
Wed, 11 Mar 2015 18:01:25 +0000 (18:01 +0000)
In this case len is always at least 1, since it is checked against
RTP_VP9_DESC_REQUIRED_SIZE + 1 and then it is reduced by
RTP_VP9_DESC_REQUIRED_SIZE before entering the has_pic_id check.

Bug-Id: CID 1270811

libavformat/rtpdec_vp9.c

index cae6f53..71ea480 100644 (file)
@@ -113,11 +113,6 @@ static int vp9_handle_packet(AVFormatContext *ctx, PayloadContext *rtp_vp9_ctx,
      *   PictureID:  8 or 16 bits including the M bit.
      */
     if (has_pic_id) {
-        if (len < 1) {
-            av_log(ctx, AV_LOG_ERROR, "Too short RTP/VP9 packet\n");
-            return AVERROR_INVALIDDATA;
-        }
-
         /* check for 1-byte or 2-byte picture index */
         if (buf[0] & 0x80) {
             if (len < 2) {