OSV-2023-86
isvce_cabac_flush in encoder/svc/isvce_cabac.c once caused incorrect streamBuf accesses due to the direct use of carry and was fixed in Commit c38af02
Similar issue
ih264e_cabac_flush in encoder/ih264e_cabac.c contains a similar logic
WORD32 carry = (u4_low >> (u4_bits_gen + CABAC_BITS)) & 0x1;
if (carry)
Would it make sense to add check on carry in the same way Commit c38af02 did?
Thank you for spending your time reading this issue, apologies if I missed anything.