-
Romain Vimont authored
The code was inspired by libaom, which calls scan_blk_mbmi() unconditionally: <https://aomedia.googlesource.com/aom/+/9a7e8768d39793963725da754e61d8115e2404d0/av1/common/mvref_common.c#490> <https://aomedia.googlesource.com/aom/+/9a7e8768d39793963725da754e61d8115e2404d0/av1/common/mvref_common.c#549> However, the boundaries are checked in the implementation of scan_blk_mbmi(): <https://aomedia.googlesource.com/aom/+/9a7e8768d39793963725da754e61d8115e2404d0/av1/common/mvref_common.c#251> Check that the given offset will not make the resulting block offsets negative (and wrap). Fixes <https://github.com/xiph/rav1e/issues/1103>.
76332aa8