Mercurial > libavcodec.hg

diff smacker.c @ 5674:ca944f1db2b3 libavcodec

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Add checks on input/output buffers size for some audio decoders
author kostya
date Thu, 13 Sep 2007 05:59:58 +0000
parents d2ef80f5fd7e
children 71dc0d839b28
line wrap: on
line diff
--- a/smacker.c	Thu Sep 13 03:22:47 2007 +0000
+++ b/smacker.c	Thu Sep 13 05:59:58 2007 +0000
@@ -590,6 +590,10 @@
     }
     stereo = get_bits1(&gb);
     bits = get_bits1(&gb);
+    if ((unp_size << !bits) > *data_size) {
+        av_log(avctx, AV_LOG_ERROR, "Frame is too large to fit in buffer\n");
+        return -1;
+    }
 
     memset(vlc, 0, sizeof(VLC) * 4);
     memset(h, 0, sizeof(HuffContext) * 4);