Commit 33a183df authored by Michael Niedermayer's avatar Michael Niedermayer

indeo3: Fix overreading requant_tab.

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: 's avatarMichael Niedermayer <michaelni@gmx.at>
parent 56ffa3fe
...@@ -622,7 +622,7 @@ static int decode_cell(Indeo3DecodeContext *ctx, AVCodecContext *avctx, ...@@ -622,7 +622,7 @@ static int decode_cell(Indeo3DecodeContext *ctx, AVCodecContext *avctx,
/* of the predicted cell in order to avoid overflows. */ /* of the predicted cell in order to avoid overflows. */
if (vq_index >= 8 && ref_block) { if (vq_index >= 8 && ref_block) {
for (x = 0; x < cell->width << 2; x++) for (x = 0; x < cell->width << 2; x++)
ref_block[x] = requant_tab[vq_index & 7][ref_block[x]]; ref_block[x] = requant_tab[vq_index & 7][ref_block[x] & 127];
} }
error = IV3_NOERR; error = IV3_NOERR;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment