Commit 51ed1a7d authored by Paul B Mahol's avatar Paul B Mahol

avcodec/pixlet: check out of bounds pfx value

Signed-off-by: 's avatarPaul B Mahol <onemda@gmail.com>
parent 41de965e
...@@ -267,6 +267,8 @@ static int read_high_coeffs(AVCodecContext *avctx, uint8_t *src, int16_t *dst, i ...@@ -267,6 +267,8 @@ static int read_high_coeffs(AVCodecContext *avctx, uint8_t *src, int16_t *dst, i
escape = av_mod_uintp2(16383, pfx); escape = av_mod_uintp2(16383, pfx);
cnt1 = get_unary(b, 0, 8); cnt1 = get_unary(b, 0, 8);
if (cnt1 < 8) { if (cnt1 < 8) {
if (pfx < 1 || pfx > 25)
return AVERROR_INVALIDDATA;
value = show_bits(b, pfx); value = show_bits(b, pfx);
if (value > 1) { if (value > 1) {
skip_bits(b, pfx); skip_bits(b, pfx);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment