Check *data_size in decode_frame()

Originally committed as revision 14636 to svn://svn.ffmpeg.org/ffmpeg/trunk

Check *data_size in decode_frame()
Originally committed as revision 14636 to svn://svn.ffmpeg.org/ffmpeg/trunk
8089c652 · Vitor Sessak · 59917046 · 8089c652
Commit 8089c652 authored Aug 06, 2008 by Vitor Sessak
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

ra288.c libavcodec/ra288.c +3 -0

No files found.
--- a/libavcodec/ra288.c
+++ b/libavcodec/ra288.c
@@ -236,6 +236,9 @@ static int ra288_decode_frame(AVCodecContext * avctx, void *data,
        return 0;
    }

+    if (*data_size < 32*5*2)
+        return -1;
+
    init_get_bits(&gb, buf, avctx->block_align * 8);

    for (i=0; i < 32; i++) {