qtrle: check for invalid line offset

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

qtrle: check for invalid line offset
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
a4ed7c3f · Laurent Aimar · Michael Niedermayer · 6d45702f · a4ed7c3f
Commit a4ed7c3f authored Oct 08, 2011 by Laurent Aimar Committed by Michael Niedermayer Oct 09, 2011
Show whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

qtrle.c libavcodec/qtrle.c +2 -0

No files found.
--- a/libavcodec/qtrle.c
+++ b/libavcodec/qtrle.c
@@ -464,6 +464,8 @@ static int qtrle_decode_frame(AVCodecContext *avctx,
        stream_ptr += 4;
        height = AV_RB16(&s->buf[stream_ptr]);
        stream_ptr += 4;
+        if (height > s->avctx->height - start_line)
+            goto done;
    } else {
        start_line = 0;
        height = s->avctx->height;