Change #286122

Comments

avformat/rtpdec_h261: Keep a single byte fragment with EBIT as end byte
When a one byte payload completed the pending end byte and also had
EBIT set, the merged byte was written as complete and then taken again
from buf[-1] as the new pending end byte, adding a byte to the frame.
Keep the merged byte pending with its 8 - EBIT valid bits instead.

Wrong output Replicated through UnModified FFmpeg
Found during triage of the security report TNp7g6QtpR0J

Changed files

• libavformat/rtpdec_h261.c