From a6ede46adc1e48dfdbd6089c2cd8cb712cc6d49d Mon Sep 17 00:00:00 2001
From: Paul Wells <paulwe@gmail.com>
Date: Wed, 1 Nov 2023 18:04:04 -0700
Subject: [PATCH] add bounds check to dependency descriptor loop (#2214)

---
 pkg/sfu/dependencydescriptor/dependencydescriptorwriter.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/sfu/dependencydescriptor/dependencydescriptorwriter.go b/pkg/sfu/dependencydescriptor/dependencydescriptorwriter.go
index 37ce7bcf8..bd7da49e3 100644
--- a/pkg/sfu/dependencydescriptor/dependencydescriptorwriter.go
+++ b/pkg/sfu/dependencydescriptor/dependencydescriptorwriter.go
@@ -148,7 +148,7 @@ func (w *DependencyDescriptorWriter) calculateMatch(idx int, template *FrameDepe
 	result.NeedCustomDtis = w.descriptor.FrameDependencies.DecodeTargetIndications != nil && !reflect.DeepEqual(w.descriptor.FrameDependencies.DecodeTargetIndications, template.DecodeTargetIndications)
 
 	for i := 0; i < w.structure.NumChains; i++ {
-		if w.activeChains&(1<<i) != 0 && w.descriptor.FrameDependencies.ChainDiffs[i] != template.ChainDiffs[i] {
+		if w.activeChains&(1<<i) != 0 && (len(w.descriptor.FrameDependencies.ChainDiffs) <= i || len(template.ChainDiffs) <= i || w.descriptor.FrameDependencies.ChainDiffs[i] != template.ChainDiffs[i]) {
 			result.NeedCustomChains = true
 			break
 		}