Check dimensions against 0 too.
39_vorbis_zero_dims.patch from chrome backport r19976 by michael Originally committed as revision 21721 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5
This commit is contained in:
parent
f3fd428697
commit
beb0dc5f36
@ -249,8 +249,8 @@ static int vorbis_parse_setup_hdr_codebooks(vorbis_context *vc) {
|
||||
}
|
||||
|
||||
codebook_setup->dimensions=get_bits(gb, 16);
|
||||
if (codebook_setup->dimensions>16) {
|
||||
av_log(vc->avccontext, AV_LOG_ERROR, " %"PRIdFAST16". Codebook's dimension is too large (%d). \n", cb, codebook_setup->dimensions);
|
||||
if (codebook_setup->dimensions>16||codebook_setup->dimensions==0) {
|
||||
av_log(vc->avccontext, AV_LOG_ERROR, " %"PRIdFAST16". Codebook's dimension is invalid (%d). \n", cb, codebook_setup->dimensions);
|
||||
goto error;
|
||||
}
|
||||
entries=get_bits(gb, 24);
|
||||
|
Loading…
x
Reference in New Issue
Block a user