har0ke/FFmpeg
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

avcodec/vqavideo: Check chunk size

Browse Source 
Fixes CID1239154

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
Michael Niedermayer 2015-05-13 00:41:38 +02:00
parent ec38a1ba40
commit 8a62b80ce6
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
libavcodec/vqavideo.c
View File

@ -231,6 +231,12 @@ static int decode_format80(VqaContext *s, int src_size,
unsigned char color; unsigned char color;
int i; int i;
if (src_size < 0 || src_size > bytestream2_get_bytes_left(&s->gb)) {
av_log(s->avctx, AV_LOG_ERROR, "Chunk size %d is out of range\n",
src_size);
return AVERROR_INVALIDDATA;
}
start = bytestream2_tell(&s->gb); start = bytestream2_tell(&s->gb);
while (bytestream2_tell(&s->gb) - start < src_size) { while (bytestream2_tell(&s->gb) - start < src_size) {
opcode = bytestream2_get_byte(&s->gb); opcode = bytestream2_get_byte(&s->gb);