CVE-2023-5217

untested

Signed-off-by: Tad <tad@spotco.us>

Patches/Common/android_external_libvpx/CVE-2023-5217.patch

@@ -0,0 +1,31 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: James Zern <jzern@google.com>
+Date: Mon, 25 Sep 2023 18:55:59 -0700
+Subject: [PATCH] VP8: disallow thread count changes
+
+Currently allocations are done at encoder creation time. Going from
+threaded to non-threaded would cause a crash.
+
+Bug: chromium:1486441
+Change-Id: Ie301c2a70847dff2f0daae408fbef1e4d42e73d4
+---
+ libvpx/vp8/encoder/onyx_if.c | 6 ++++++
+ 1 file changed, 6 insertions(+)
+
+diff --git a/libvpx/vp8/encoder/onyx_if.c b/libvpx/vp8/encoder/onyx_if.c
+index 2b059a1e4..8d0566862 100644
+--- a/libvpx/vp8/encoder/onyx_if.c
++++ b/libvpx/vp8/encoder/onyx_if.c
+@@ -1445,6 +1445,12 @@ void vp8_change_config(VP8_COMP *cpi, VP8_CONFIG *oxcf) {
+   last_h = cpi->oxcf.Height;
+   prev_number_of_layers = cpi->oxcf.number_of_layers;
+ 
++  if (cpi->initial_width) {
++    // TODO(https://crbug.com/1486441): Allow changing thread counts; the
++    // allocation is done once in vp8_create_compressor().
++    oxcf->multi_threaded = cpi->oxcf.multi_threaded;
++  }
++
+   cpi->oxcf = *oxcf;
+ 
+   switch (cpi->oxcf.Mode) {