# HG changeset patch # User aurel # Date 1223856653 0 # Node ID 21c3e313709ef275fa1cfc2efa6a12bd68ed68af # Parent 00fca5d6f0d96245263dc8edeaf18ed22327ee74 vp6dec: ensure we don't try to use a buffer with negative size this should never happen in valid vp6 bitstream fix issue684 diff -r 00fca5d6f0d9 -r 21c3e313709e vp6.c --- a/vp6.c Sun Oct 12 20:22:55 2008 +0000 +++ b/vp6.c Mon Oct 13 00:10:53 2008 +0000 @@ -135,6 +135,8 @@ if (coeff_offset) { buf += coeff_offset; buf_size -= coeff_offset; + if (buf_size < 0) + return 0; if (s->use_huffman) { s->parse_coeff = vp6_parse_coeff_huffman; init_get_bits(&s->gb, buf, buf_size<<3);