Commit a3c2a9c7 authored by Paul B Mahol's avatar Paul B Mahol

avcodec/magicyuv: fix decoding of raw slices

Signed-off-by: 's avatarPaul B Mahol <onemda@gmail.com>
parent 7e0623b7
...@@ -124,26 +124,37 @@ static int decode_slice(AVCodecContext *avctx, void *tdata, ...@@ -124,26 +124,37 @@ static int decode_slice(AVCodecContext *avctx, void *tdata,
int sheight = AV_CEIL_RSHIFT(s->slice_height, s->vshift[i]); int sheight = AV_CEIL_RSHIFT(s->slice_height, s->vshift[i]);
int fake_stride = p->linesize[i] * (1 + interlaced); int fake_stride = p->linesize[i] * (1 + interlaced);
int stride = p->linesize[i]; int stride = p->linesize[i];
int pred; int flags, pred;
if ((ret = init_get_bits8(&b, s->buf + s->slices[i][j].start, s->slices[i][j].size)) < 0) if ((ret = init_get_bits8(&b, s->buf + s->slices[i][j].start, s->slices[i][j].size)) < 0)
return ret; return ret;
pred = get_bits(&b, 16); flags = get_bits(&b, 8);
pred = get_bits(&b, 8);
dst = p->data[i] + j * sheight * stride; dst = p->data[i] + j * sheight * stride;
for (k = 0; k < height; k++) { if (flags & 1) {
for (x = 0; x < width; x++) { for (k = 0; k < height; k++) {
int pix; for (x = 0; x < width; x++) {
if (get_bits_left(&b) <= 0) { dst[x] = get_bits(&b, 8);
return AVERROR_INVALIDDATA;
} }
pix = get_vlc2(&b, s->vlc[i].table, s->vlc[i].bits, 3); dst += stride;
if (pix < 0) { }
return AVERROR_INVALIDDATA; } else {
for (k = 0; k < height; k++) {
for (x = 0; x < width; x++) {
int pix;
if (get_bits_left(&b) <= 0) {
return AVERROR_INVALIDDATA;
}
pix = get_vlc2(&b, s->vlc[i].table, s->vlc[i].bits, 3);
if (pix < 0) {
return AVERROR_INVALIDDATA;
}
dst[x] = 255 - pix;
} }
dst[x] = 255 - pix; dst += stride;
} }
dst += stride;
} }
if (pred == LEFT) { if (pred == LEFT) {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment