Commit 7c0748c2 authored by Michael Niedermayer's avatar Michael Niedermayer

eatqi: replace break by goto.

This fixes some heap overread.

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: 's avatarMichael Niedermayer <michaelni@gmx.at>
parent 5a4af049
...@@ -139,9 +139,10 @@ static int tqi_decode_frame(AVCodecContext *avctx, ...@@ -139,9 +139,10 @@ static int tqi_decode_frame(AVCodecContext *avctx,
for (s->mb_x=0; s->mb_x<(avctx->width+15)/16; s->mb_x++) for (s->mb_x=0; s->mb_x<(avctx->width+15)/16; s->mb_x++)
{ {
if(tqi_decode_mb(s, t->block) < 0) if(tqi_decode_mb(s, t->block) < 0)
break; goto end;
tqi_idct_put(t, t->block); tqi_idct_put(t, t->block);
} }
end:
*data_size = sizeof(AVFrame); *data_size = sizeof(AVFrame);
*(AVFrame*)data = t->frame; *(AVFrame*)data = t->frame;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment