h265.go 中 vps Decode有越界

[ws-daixy]

vps.Layer_id_included_flag = make([][]uint8, vps.Vps_num_layer_sets_minus1)
for i := 1; i <= int(vps.Vps_num_layer_sets_minus1); i++ {
vps.Layer_id_included_flag[i] = make([]uint8, vps.Vps_max_layer_id)
for j := 0; j <= int(vps.Vps_max_layer_id); j++ {
vps.Layer_id_included_flag[i][j] = bs.Uint8(1)
}
}
这里，make 了一个Vps_num_layer_sets_minus1大小的slice，但是i<=Vps_num_layer_sets_minus1,所以Layer_id_included_flag会越界，同时下面的Layer_id_included_flag也是会越界

[yapingcat]

thanks