# HG changeset patch # User skal # Date 1280704806 0 # Node ID 3ce688a83319c11f460f215f75e6e2f4fa764579 # Parent 435319d67bd8fc2d9cf2c48dfc822286cf990cfe prevent access to vp8_coeff_band[16] diff -r 435319d67bd8 -r 3ce688a83319 vp8.c --- a/vp8.c Sat Jul 31 23:13:15 2010 +0000 +++ b/vp8.c Sun Aug 01 23:20:06 2010 +0000 @@ -822,11 +822,11 @@ skip_eob: if (!vp56_rac_get_prob_branchy(c, token_prob[1])) { // DCT_0 + if (++i == 16) + return nonzero; // invalid input; blocks should end with EOB zero_nhood = 0; - token_prob = probs[vp8_coeff_band[++i]][0]; - if (i < 16) - goto skip_eob; - return nonzero; // invalid input; blocks should end with EOB + token_prob = probs[vp8_coeff_band[i]][0]; + goto skip_eob; } if (!vp56_rac_get_prob_branchy(c, token_prob[2])) { // DCT_1