Commit e13cca4b authored by Reimar Döffinger's avatar Reimar Döffinger

Ensure that the filter limit values do not exceed the maximum allowed value of 127.

Originally committed as revision 19351 to svn://svn.ffmpeg.org/ffmpeg/trunk
parent 7fa5f999
...@@ -2171,8 +2171,13 @@ static int theora_decode_tables(AVCodecContext *avctx, GetBitContext *gb) ...@@ -2171,8 +2171,13 @@ static int theora_decode_tables(AVCodecContext *avctx, GetBitContext *gb)
if (s->theora >= 0x030200) { if (s->theora >= 0x030200) {
n = get_bits(gb, 3); n = get_bits(gb, 3);
/* loop filter limit values table */ /* loop filter limit values table */
for (i = 0; i < 64; i++) for (i = 0; i < 64; i++) {
s->filter_limit_values[i] = get_bits(gb, n); s->filter_limit_values[i] = get_bits(gb, n);
if (s->filter_limit_values[i] > 127) {
av_log(avctx, AV_LOG_ERROR, "filter limit value too large (%i > 127), clamping\n", s->filter_limit_values[i]);
s->filter_limit_values[i] = 127;
}
}
} }
if (s->theora >= 0x030200) if (s->theora >= 0x030200)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment