Commit 8e09482e authored by Michael Niedermayer's avatar Michael Niedermayer

vcr1dec: Check that there is sufficient input data.

Fixes crash.
Signed-off-by: 's avatarMichael Niedermayer <michaelni@gmx.at>
parent 11ca3416
...@@ -56,6 +56,11 @@ static int decode_frame(AVCodecContext *avctx, ...@@ -56,6 +56,11 @@ static int decode_frame(AVCodecContext *avctx,
if(p->data[0]) if(p->data[0])
avctx->release_buffer(avctx, p); avctx->release_buffer(avctx, p);
if(buf_size < 16 + avctx->height + avctx->width*avctx->height*5/8){
av_log(avctx, AV_LOG_ERROR, "Insufficient input data.\n");
return AVERROR(EINVAL);
}
p->reference= 0; p->reference= 0;
if(avctx->get_buffer(avctx, p) < 0){ if(avctx->get_buffer(avctx, p) < 0){
av_log(avctx, AV_LOG_ERROR, "get_buffer() failed\n"); av_log(avctx, AV_LOG_ERROR, "get_buffer() failed\n");
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment