Commit 2e7bc9c2 authored by Michael Niedermayer's avatar Michael Niedermayer

snowdec: fix off by 1 error in dimensions check

fixes infinite loop
Signed-off-by: 's avatarMichael Niedermayer <michaelni@gmx.at>
parent 73b40e2e
...@@ -345,7 +345,7 @@ static int decode_header(SnowContext *s){ ...@@ -345,7 +345,7 @@ static int decode_header(SnowContext *s){
return -1; return -1;
} }
if(FFMIN(s->avctx-> width>>s->chroma_h_shift, if(FFMIN(s->avctx-> width>>s->chroma_h_shift,
s->avctx->height>>s->chroma_v_shift) >> (s->spatial_decomposition_count-1) <= 0){ s->avctx->height>>s->chroma_v_shift) >> (s->spatial_decomposition_count-1) <= 1){
av_log(s->avctx, AV_LOG_ERROR, "spatial_decomposition_count %d too large for size\n", s->spatial_decomposition_count); av_log(s->avctx, AV_LOG_ERROR, "spatial_decomposition_count %d too large for size\n", s->spatial_decomposition_count);
return -1; return -1;
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment