Commit 438abdaa authored by Vitor Sessak's avatar Vitor Sessak

Check available size before writing in decode_frame()

Originally committed as revision 14637 to svn://svn.ffmpeg.org/ffmpeg/trunk
parent 8089c652
...@@ -315,6 +315,9 @@ static int ra144_decode_frame(AVCodecContext * avctx, void *vdata, ...@@ -315,6 +315,9 @@ static int ra144_decode_frame(AVCodecContext * avctx, void *vdata,
RA144Context *ractx = avctx->priv_data; RA144Context *ractx = avctx->priv_data;
GetBitContext gb; GetBitContext gb;
if (*data_size < 2*160)
return -1;
if(buf_size < 20) { if(buf_size < 20) {
av_log(avctx, AV_LOG_ERROR, av_log(avctx, AV_LOG_ERROR,
"Frame too small (%d bytes). Truncated file?\n", buf_size); "Frame too small (%d bytes). Truncated file?\n", buf_size);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment