Fix out of bounds in log_tile_cols_from_picsize_level

fmayer · fmayer · commit d6e5cd7132d5 · 2025-12-09T17:08:58.000-08:00
This accidentally used enum values as array indices, and as such would
run from 10 to 255 on a 14 element array.

Bug: b/465388500
Change-Id: Ibaa1f3444934fdf574ad908d57aee9590b21b089
diff --git a/vp9/encoder/vp9_encoder.h b/vp9/encoder/vp9_encoder.h
@@ -1195,7 +1195,7 @@ static INLINE int log_tile_cols_from_picsize_level(uint32_t width,
   int i;
   const uint32_t pic_size = width * height;
   const uint32_t pic_breadth = VPXMAX(width, height);
-  for (i = LEVEL_1; i < LEVEL_MAX; ++i) {
+  for (i = 0; i < VP9_LEVELS; ++i) {
     if (vp9_level_defs[i].max_luma_picture_size >= pic_size &&
         vp9_level_defs[i].max_luma_picture_breadth >= pic_breadth) {
       return get_msb(vp9_level_defs[i].max_col_tiles);
