Check dimensions against 0 too.
39_vorbis_zero_dims.patch from chrome backport r19976 by michael Originally committed as revision 21721 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5
This commit is contained in:
parent
f3fd428697
commit
beb0dc5f36
@ -249,8 +249,8 @@ static int vorbis_parse_setup_hdr_codebooks(vorbis_context *vc) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
codebook_setup->dimensions=get_bits(gb, 16);
|
codebook_setup->dimensions=get_bits(gb, 16);
|
||||||
if (codebook_setup->dimensions>16) {
|
if (codebook_setup->dimensions>16||codebook_setup->dimensions==0) {
|
||||||
av_log(vc->avccontext, AV_LOG_ERROR, " %"PRIdFAST16". Codebook's dimension is too large (%d). \n", cb, codebook_setup->dimensions);
|
av_log(vc->avccontext, AV_LOG_ERROR, " %"PRIdFAST16". Codebook's dimension is invalid (%d). \n", cb, codebook_setup->dimensions);
|
||||||
goto error;
|
goto error;
|
||||||
}
|
}
|
||||||
entries=get_bits(gb, 24);
|
entries=get_bits(gb, 24);
|
||||||
|
Loading…
x
Reference in New Issue
Block a user