Commit 0c6f382e authored by Michael Niedermayer's avatar Michael Niedermayer

Merge commit '62b1e3b1'

* commit '62b1e3b1':
  aasc: Check minimum buffer size

Conflicts:
	libavcodec/aasc.c

See: e1631f8e
See: 8a57ca5cMerged-by: 's avatarMichael Niedermayer <michaelni@gmx.at>
parents 5f312139 62b1e3b1
......@@ -107,11 +107,9 @@ static int aasc_decode_frame(AVCodecContext *avctx,
switch (compr) {
case 0:
stride = (avctx->width * psize + psize) & ~psize;
if (buf_size < stride * avctx->height)
return AVERROR_INVALIDDATA;
for (i = avctx->height - 1; i >= 0; i--) {
if (avctx->width * psize > buf_size) {
av_log(avctx, AV_LOG_ERROR, "Next line is beyond buffer bounds\n");
break;
}
memcpy(s->frame->data[0] + i * s->frame->linesize[0], buf, avctx->width * psize);
buf += stride;
buf_size -= stride;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment