Commit cc0e47b5 authored by Michael Niedermayer's avatar Michael Niedermayer

avcodec/jpeglsdec: check err value for ls_get_code_runterm()

Fixes infinite loop
Fixes Ticket3086
Signed-off-by: 's avatarMichael Niedermayer <michaelni@gmx.at>
parent 4fab08c9
...@@ -148,6 +148,8 @@ static inline int ls_get_code_runterm(GetBitContext *gb, JLSState *state, ...@@ -148,6 +148,8 @@ static inline int ls_get_code_runterm(GetBitContext *gb, JLSState *state,
ret = ret >> 1; ret = ret >> 1;
} }
if(FFABS(ret) > 0xFFFF)
return -0x10000;
/* update state */ /* update state */
state->A[Q] += FFABS(ret) - RItype; state->A[Q] += FFABS(ret) - RItype;
ret *= state->twonear; ret *= state->twonear;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment